Every CVE Search/ Get API key

CVE-2012-0059

Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages

4.9 MediumFix available

A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server logs and emails, leading to the unauthorized disclosure of user passwords.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

1.67%Up 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List Score used 4.9

Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages

A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server logs and emails, leading to the unauthorized disclosure of user passwords.

Record
CVE-2012-0059
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-209
Updated
2026-11-05
EUVDEUVD-2012-0097 4.9

A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server logs and emails, leading to the unauthorized disclosure of user passwords.

Record
EUVD-2012-0097
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-05
GitHub AdvisoriesGHSA-gqj9-6pwj-7952 4.9

Spacewalk-backend in Red Hat Network (RHN) Satellite and Proxy 5.4 includes cleartext user...

Spacewalk-backend in Red Hat Network (RHN) Satellite and Proxy 5.4 includes cleartext user passwords in an error message when a system registration XML-RPC call fails, which allows remote administrators to obtain the password by reading (1) the server log and (2) an email.

Record
GHSA-gqj9-6pwj-7952
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-209
Updated
2026-11-02
NVD 4.9

A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server logs and emails, leading to the unauthorized disclosure of user passwords.

Record
CVE-2012-0059
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-209, CWE-310
Updated
2026-11-05

Affected products

Affected packages

Affected packages
PackageAffectedFixed
spacewalk-backend
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-app
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-applet
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-config-files
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-config-files-common
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-config-files-tool
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-iss
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-iss-export
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-libs
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-package-push-server
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
Show 30 moreShow less
Affected packages
PackageAffectedFixed
spacewalk-backend-server
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-sql
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-sql-oracle
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-tools
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-upload-server
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-xml-export-libs
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-xmlrpc
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-xp
Red Hat:network_satellite:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-app
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-applet
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-config-files
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-config-files-common
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-config-files-tool
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-iss
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-iss-export
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-libs
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-package-push-server
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-server
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-sql
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-sql-oracle
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-tools
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-upload-server
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-xml-export-libs
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-xmlrpc
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-xp
Red Hat:network_satellite:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend
Red Hat:network_proxy:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend-libs
Red Hat:network_proxy:5.4::el5
 before 0:1.2.13-66.el5sat
0:1.2.13-66.el5sat
spacewalk-backend
Red Hat:network_proxy:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat
spacewalk-backend-libs
Red Hat:network_proxy:5.4::el6
 before 0:1.2.13-66.el6sat
0:1.2.13-66.el6sat

History

History
RecordedChangedSources
factsEUVD
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0059 is a medium vulnerability (CVSS 4.9) in Red Hat Enterprise Linux 6, published February 5, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.67%, the 76th percentile. Fixed in spacewalk-backend 0:1.2.13-66.el5sat.

References

Show 7 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open