The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1543 advisory.

  - katello: pulp admin password logged in plaintext in world-readable katello/production.log (CVE-2012-3538)

  - pulp /etc/pulp/pulp.conf world readable, contains default admin password (CVE-2012-4574)

  - CloudForms Katello: lack of authorization in proxies_controller.rb (CVE-2012-5603)

  - CloudForms grinder: /var/lib/pulp/cache/grinder directory is world-writeable (CVE-2012-5605)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Plugins Search

medium