CVE-2012-3503 Katello uses hard coded credential
Remote attackers can authenticate as arbitrary users in Katello CloudForms by exploiting a default secret token generated during installation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-3503?
CVE-2012-3503 is a critical vulnerability in Redhat Enterprise Linux Server, published on 25 Aug 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System Engine web interface as an arbitrary user by creating a cookie using the default secret_token.
Weakness: CWE-798
Which versions are affected by CVE-2012-3503?
4 open source packages ship an affected version, including katello. It affects 2 products.
| Package | Affected | Fixed in |
|---|---|---|
katello RubyGems | All versions | 1.0.6 |
katello RubyGems | All versions | 1.0.6 |
katello RubyGems | From 1.1.0 | 1.1.7 |
katello RubyGems | From 1.1.0 | 1.1.7 |
Products include Redhat Enterprise Linux Server, Theforeman Katello.
How do I fix CVE-2012-3503?
Upgrade katello to a fixed version for your release line: 1.0.6 or 1.1.7.
Is CVE-2012-3503 being exploited?
There is no known exploitation of CVE-2012-3503 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux Server
Sources
Also known as GHSA-5xv2-q475-rwrh.