Unscored severity · published Dec 2, 2013
CVE-2012-0434
The server in Crowbar, as used in SUSE Cloud 1.0, uses weak permissions for the production.log file, which has unspecified impact and attack vectors
–
CVSS
1.7%
EPSS
No
On KEV
Description
The server in Crowbar, as used in SUSE Cloud 1.0, uses weak permissions for the production.log file, which has unspecified impact and attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Suse Cloud · Novell
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0434
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0434
bugzilla.novell.com
https://bugzilla.novell.com/show_bug.cgi?id=784857
Vendor Advisory
https://support.novell.com/security/cve/CVE-2012-0434.html
Vendor Advisory
https://www.suse.com/support/update/announcement/2013/suse-ru-20130020-1.html
More from Suse Cloud
–
CVE-2014-0592
Barclamp (aka barclamp-network) 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote…