NVD

Id
44407  
Name
CVE-2012-2690  
Description
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-06-29  
Modified Date
2012-07-17  
Seq
2012-2690  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222811 44407 CVE-2012-2690 RHSA-2012:0774  View
222812 44407 CVE-2012-2690 53932  View
222813 44407 CVE-2012-2690 libguestfs-virtedit-info-disc(76220)  View
222814 44407 CVE-2012-2690 [Libguestfs] 20120521 [ANNOUNCE] libguestfs 1.18 released - tools for managing virtual machines and disk images  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27249 JVNDB-2012-002956 libguestfs の virt-edit における重要な情報を取得される脆弱性 libguestfs の virt-edit は、編集の際に、元のファイルからアクセス権限を引き継がずに、新たなファイルを World Readable なパーミッション (誰でも読み取り可能な権限) で保存するため、重要な情報を取得される脆弱性が存在します。 CVE-2012-2690 55928 CVE-2012-2690 44407 2.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002956.html 2012-05-22 2012-07-03 View