{"id":"CVE-2012-0949","url":"https://www.cyber-defence.io/tools/cve/CVE-2012-0949","generatedAt":"2026-10-27T22:04:08.516Z","title":"The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain system state archive files when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report.","description":"The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain system state archive files when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report.","published":"2012-05-31T17:55:03.000Z","lastModified":"2026-06-16T23:38:34.000Z","status":"Modified","sourceIdentifier":"security@ubuntu.com","cvss":{"version":"2.0","score":5,"severity":"MEDIUM","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N"},"cwe":["CWE-200"],"affected":["canonical/ubuntu linux"],"epss":{"score":0.02094,"percentile":0.81517,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (2.09%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://osvdb.org/82020","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/49230","tags":["Vendor Advisory"],"source":"security@ubuntu.com"},{"url":"http://www.securityfocus.com/bid/53605","source":"security@ubuntu.com"},{"url":"http://www.ubuntu.com/usn/USN-1443-1","tags":["Vendor Advisory"],"source":"security@ubuntu.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/75728","source":"security@ubuntu.com"},{"url":"http://osvdb.org/82020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/49230","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/53605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1443-1","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/75728","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-0949","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}