CVEvulnerability

CVE-2012-5477

3.6 LOW Published 2014-05-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2014-05-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-264

Description

The smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify files created by the daemon via unspecified vectors.

Affected configurations

• theforeman foreman (<= 1.0)

Related

Weakness · not in database (1)

References