CVE-2012-2679: Red Hat Rhncfg

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Red Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak permissions (world-readable) for /var/log/rhncfg-actions, which allows local users to obtain sensitive information about the rhncfg-client actions by reading the file.

Affected products

• Red Hat Rhncfg: up to and including 5.10.27

Published 2012-10-22. Last modified 2026-06-16.