A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server logs and emails, leading to the unauthorized disclosure of user passwords.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 4.9 · red hatNVD modified 2026-10-30 18:03
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.
References 5
- http://rhn.redhat.com/errata/RHSA-2012-0101.html
- http://rhn.redhat.com/errata/RHSA-2012-0102.html
- https://access.redhat.com/errata/RHSA-2012:0101 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/errata/RHSA-2012:0102 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/security/cve/CVE-2012-0059 vdb-entry, x_refsource_redhat