CVE-2012-5605

LowCVSS 3.3

Published: 04/01/2013(UTC)Updated: 30/10/2026(UTC)Translated: 30/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

25th percentile - higher than 25% of all known CVEs

Summary

A flaw was found in Grinder, a component of Red Hat CloudForms, where incorrect world-writable permissions on the `/var/lib/pulp/cache/grinder/` directory allow a local user to modify Grinder's cache files. This could lead to unauthorized data tampering within the application's cache.

Risk Assessment

A local user can alter cached data, potentially causing application malfunction or injection of malicious data. The risk affects data integrity in the CloudForms environment.

Recommendation

Restrict permissions on the `/var/lib/pulp/cache/grinder/` directory so only authorized processes can access it. Apply the fix provided by Red Hat.

Other vulnerabilities in Red Hat CloudForms

CVE-2016-5383High
The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code due to a lack of field filters.

Original NVD description (English source)

A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due to incorrect world-writable permissions set on the `/var/lib/pulp/cache/grinder/` directory. This could lead to unauthorized data tampering within the application's cache.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS