Dashboard / CVE-2012-0059

CVE-2012-0059

MEDIUM
MEDIUM Priority: 0.08 BB Relevance: 55/100
Published: 2014-02-05 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
S: Unchanged
C: High
I: None
A: None

Description

A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server logs and emails, leading to the unauthorized disclosure of user passwords.

Weakness Classification (2)

Affected Software (2)

VendorProductVersion
redhat network_proxy 5.4
redhat satellite 5.4

References & Advisories (5)

https://access.redhat.com/errata/RHSA-2012:0101
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2012:0102
vendor-advisory x_refsource_REDHAT

Bug Bounty Relevance

55 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

4.9 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

1.67%
Raw Score 0.016720
Percentile 76.8%
Date 2026-10-31

EPSS Trend

2026-10-31
0.01672
2026-10-30
0.01635

Intelligence Sources

mitre ref →
nvd ref →

External Links