CVEvulnerability
CVE-2012-2690
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-06-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
Affected configurations
• libguestfs libguestfs (<= 1.17.43)
• libguestfs libguestfs 1.16.0
• libguestfs libguestfs 1.16.1
• libguestfs libguestfs 1.16.2
• libguestfs libguestfs 1.16.3
• libguestfs libguestfs 1.16.4
• libguestfs libguestfs 1.16.5
• libguestfs libguestfs 1.16.6
• libguestfs libguestfs 1.16.7
• libguestfs libguestfs 1.16.8
• libguestfs libguestfs 1.16.9
• libguestfs libguestfs 1.16.10
• libguestfs libguestfs 1.16.11
• libguestfs libguestfs 1.16.12
• libguestfs libguestfs 1.16.13
• libguestfs libguestfs 1.16.14
• libguestfs libguestfs 1.16.15
• libguestfs libguestfs 1.16.16
• libguestfs libguestfs 1.16.17
• libguestfs libguestfs 1.16.18
• libguestfs libguestfs 1.16.19
• libguestfs libguestfs 1.16.20
• libguestfs libguestfs 1.16.21
• libguestfs libguestfs 1.16.22
• libguestfs libguestfs 1.16.23
• libguestfs libguestfs 1.16.24
• libguestfs libguestfs 1.16.25
• libguestfs libguestfs 1.16.26
• libguestfs libguestfs 1.17.0
• libguestfs libguestfs 1.17.1
• libguestfs libguestfs 1.17.2
• libguestfs libguestfs 1.17.3
• libguestfs libguestfs 1.17.4
• libguestfs libguestfs 1.17.5
• libguestfs libguestfs 1.17.6
• libguestfs libguestfs 1.17.7
• libguestfs libguestfs 1.17.8
• libguestfs libguestfs 1.17.9
• libguestfs libguestfs 1.17.10
• libguestfs libguestfs 1.17.11
• libguestfs libguestfs 1.17.12
• libguestfs libguestfs 1.17.13
• libguestfs libguestfs 1.17.14
• libguestfs libguestfs 1.17.15
• libguestfs libguestfs 1.17.16
• libguestfs libguestfs 1.17.17
• libguestfs libguestfs 1.17.18
• libguestfs libguestfs 1.17.19
• libguestfs libguestfs 1.17.20
• libguestfs libguestfs 1.17.21
• libguestfs libguestfs 1.17.22
• libguestfs libguestfs 1.17.23
• libguestfs libguestfs 1.17.24
• libguestfs libguestfs 1.17.25
• libguestfs libguestfs 1.17.26
• libguestfs libguestfs 1.17.27
• libguestfs libguestfs 1.17.28
• libguestfs libguestfs 1.17.29
• libguestfs libguestfs 1.17.30
• libguestfs libguestfs 1.17.31
… and 11 more
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2012-0774.html rhn.redhat.com
- http://secunia.com/advisories/49431 Vendor Advisory
- http://secunia.com/advisories/49545 Vendor Advisory
- http://www.securityfocus.com/bid/53932 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76220 exchange.xforce.ibmcloud.com
- https://www.redhat.com/archives/libguestfs/2012-May/msg00104.html www.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-0774.html rhn.redhat.com
- http://secunia.com/advisories/49431 Vendor Advisory
- http://secunia.com/advisories/49545 Vendor Advisory
- http://www.securityfocus.com/bid/53932 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76220 exchange.xforce.ibmcloud.com
- https://www.redhat.com/archives/libguestfs/2012-May/msg00104.html www.redhat.com