VulnerabilityModified

CVE-2012-6118

The Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota restrictions by updating the Maximum Running Instances quota user setting.

MEDIUM 5.5EPSS 1.18%

Does this matter?

Lower severity and a low EPSS score (1.18%). Track it; it rarely justifies an emergency change on its own.

Description

The Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota restrictions by updating the Maximum Running Instances quota user setting.

CVSS 2.0: 5.5 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:P
EPSS: 1.18% probability · 66th percentile
CISA KEV: Not listed
Weakness: CWE-264
Affected: redhat/aeolus conductor
Source: secalert@redhat.com

References

http://rhn.redhat.com/errata/RHSA-2013-0545.htmlVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=906192Exploit
http://rhn.redhat.com/errata/RHSA-2013-0545.htmlVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=906192Exploit

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.