CVE-2012-5477

The smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify files created by the daemon via unspecified vectors.

Score

CVSS 2.0 3.6 Low

Status

Modified - secalert@redhat.com

Published

2014-05-08

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Foreman (Theforeman)

References

• http://projects.theforeman.org/issues/1929
• http://theforeman.org/security.html