What is the CVSS score of CVE-2014-0135?

CVE-2014-0135 has a CVSS 2.0 base score of 1.9 (Low). CVSS vector: AV:L/AC:M/Au:N/C:P/I:N/A:N. EPSS exploitation probability: 0.1%.

Is there a patch available for CVE-2014-0135?

Yes, a patch is available for CVE-2014-0135. Update the affected software to the latest version immediately.

Kafo CVE-2014-0135

LOW

Permissions, Privileges, and Access Controls (CWE-264)

2014-05-08 secalert@redhat.com

Privilege Escalation Kafo

1.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

1.9 LOW

AV:L/AC:M/Au:N/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:P/I:N/A:N

Attack Vector

Local

Attack Complexity

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

May 08, 2014 - 14:29 cve.org

LOW 1.9

DescriptionCVE.org

Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml, which allows local users to obtain passwords and other sensitive information by reading the file.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-264. Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml, which allows local users to obtain passwords and other sensitive information by reading the file. Affected products include: Theforeman Kafo. Version information: before 0.3.17.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.