CVEvulnerability

CVE-2012-6118

5.5 MEDIUM Published 2013-03-12 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2013-03-12
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.5 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:P
Weaknesses: CWE-264

Description

The Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota restrictions by updating the Maximum Running Instances quota user setting.

Affected configurations

• redhat aeolus conductor

Weakness · not in database (1)

CWE-264

References

http://rhn.redhat.com/errata/RHSA-2013-0545.html Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=906192 Exploit
http://rhn.redhat.com/errata/RHSA-2013-0545.html Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=906192 Exploit

CVE-2012-6118

Description

Affected configurations

Related

Weakness · not in database (1)

References