{"identifier":"CVE-2012-0059","cve":{"id":"CVE-2012-0059","description":"A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server logs and emails, leading to the unauthorized disclosure of user passwords.","published":"2014-02-05T18:55:06.223000+00:00","modified":"2026-10-30T19:17:25.430000+00:00","status":"Modified","score":4.9,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss_version":"3.1","affected":[{"criteria":"cpe:2.3:a:redhat:network_proxy:5.4:*:*:*:*:*:*:*","versionStartIncluding":"","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":""},{"criteria":"cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*","versionStartIncluding":"","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":""}],"weaknesses":["CWE-209","CWE-310"],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2012-0101.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0102.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0101","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2012:0102","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2012-0059","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0101.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"kev":null,"kev_checked":true,"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:network_proxy:5.4:*:*:*:*:*:*:*","matchCriteriaId":"E7DD07C5-6D72-4926-B752-A7D1C1953772"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:5.4:*:*:*:*:*:*:*","matchCriteriaId":"3CCE54F9-0195-4E9D-A15F-3947EA0EBED7"}]}]}],"source":"nvd","retrieved_at":"2026-10-30T21:57:40.045176+00:00","exploited":false,"kev_stale":false,"products":["redhat / network proxy","redhat / satellite"],"priority":{"label":"Assess exposure and vendor guidance","reasons":["No higher-priority signal is available in the current stored evidence.","Fresh EPSS data is unavailable; missing values are not zero."]},"epss":null,"version_assessment":null},"news":[],"campaigns":[],"domains":[{"domain":"rhn.redhat.com","source_url":"http://rhn.redhat.com/errata/RHSA-2012-0101.html","investigate_url":"https://investigate.aeglixmind.com/#rhn.redhat.com"},{"domain":"access.redhat.com","source_url":"https://access.redhat.com/errata/RHSA-2012:0101","investigate_url":"https://investigate.aeglixmind.com/#access.redhat.com"}],"arsenal_url":"https://arsenal.aeglixmind.com/?cve=CVE-2012-0059","catalog_url":"https://cves.aeglixmind.com/cve/CVE-2012-0059","research_url":"https://investigate.aeglixmind.com/research/cve/CVE-2012-0059","coverage":{"news_candidates_checked":0,"campaign_candidates_checked":0,"bounded":false,"notice":"Exact CVE mentions in stored public excerpts and reviewed campaign content only. A mention is not proof of exploitation, attribution or tool suitability. Missing matches do not establish absence."}}