GitHub Advisoryadvisory · RubyGems
GHSA-5xv2-q475-rwrh Katello uses hard coded credential
CRITICAL
Official page ↗
- Aliases
- CVE-2012-3503
- Ecosystem
- RubyGems
- Packages
- katello
- Severity
- Critical
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-798
- Reviewed
- 2024-04-09
Affected packages
• RubyGems katello: < 1.0.6 → fixed in 1.0.6
• RubyGems katello: >= 1.1.0, < 1.1.7 → fixed in 1.1.7
Description
The installation script in Katello 1.0 and earlier does not properly generate the `Application.config.secret_token` value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System Engine web interface as an arbitrary user by creating a cookie using the default `secret_token`.
Related
Alias · CVE (1)
- CVE-2012-3503 The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each… vulnerability
Weakness · CWE (1)
- CWE-798 Use of Hard-coded Credentials weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2012-3503 advisory
- https://github.com/Katello/katello/pull/499 web
- https://github.com/Katello/katello/commit/7c256fef9d75029d0ffff58ff1dcda915056d3a3 web
- https://github.com/Katello/katello package
- https://github.com/advisories/GHSA-5xv2-q475-rwrh advisory
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/katello/CVE-2012-3503.yml web
- https://web.archive.org/web/20140806122239/http://secunia.com/advisories/50344 web
- https://web.archive.org/web/20200229120740/http://www.securityfocus.com/bid/55140 web
- http://rhn.redhat.com/errata/RHSA-2012-1186.html web
- http://rhn.redhat.com/errata/RHSA-2012-1187.html web