Description
Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users to read pulp administrative passwords by reading production.log.
References
- cloudforms-pulp-info-disc(80547) vdb-entry
- 88139 vdb-entry
- 51472 third-party-advisory
- RHSA-2012:1543 vendor-advisory
- 56819 vdb-entry