https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T02:50:51.902159+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-113110 EUVD-2026-113110 2026-10-17T02:50:51.906014+00:00 EUVD-2026-113110 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5509 fkie_cve-2012-5509 2026-10-17T02:50:51.906076+00:00

aeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for a temporary file in /tmp, which allows local users to read credentials by reading this file.

 https://cve.radiocsirt.org/vuln/ghsa-4m29-g7f4-9v6x GHSA-4m29-g7f4-9v6x 2026-10-17T02:50:51.906132+00:00

aeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for a temporary file in /tmp, which allows local users to read credentials by reading this file.

 https://cve.radiocsirt.org/vuln/gsd-2012-5509 gsd-2012-5509 2026-10-17T02:50:51.906158+00:00 gsd-2012-5509 https://cve.radiocsirt.org/vuln/rhsa-2013:0545 RHSA-2013:0545 — Red Hat Security Advisory: CloudForms Cloud Engine 1.1.2 update 2026-10-17T02:50:51.906202+00:00

aeolus-configserver: aeolus-configserver-setup /tmp file conductor credentials leak Configserver: Passwords from application blueprint stored plaintext in configserver.log Conductor: Unprivileged user can change their own Maximum Running Instances quota