Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-6h6n-7frd-1ked

Summary Candlepin: bootstrap RPM deploys CA certificate file with mode 666

Aliases

alias	CVE-2012-6116

Fixed_packages

Affected_packages

url pkg:rpm/redhat/candlepin@0.7.19-3?arch=el6cf

purl pkg:rpm/redhat/candlepin@0.7.19-3?arch=el6cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-67r2-k4bt-yqcr

vulnerability	VCID-6h6n-7frd-1ked

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/candlepin@0.7.19-3%3Farch=el6cf

url pkg:rpm/redhat/candlepin@0.7.24-1?arch=el6_3

purl pkg:rpm/redhat/candlepin@0.7.24-1?arch=el6_3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6h6n-7frd-1ked

vulnerability	VCID-9qc2-be2u-vfgv

vulnerability	VCID-c3cm-h13f-jubq

vulnerability	VCID-ebq1-gkhe-pua7

vulnerability	VCID-hbtn-7423-m3gb

vulnerability	VCID-pb4n-q6u8-syds

vulnerability	VCID-y12d-fjpf-uubh

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/candlepin@0.7.24-1%3Farch=el6_3

url pkg:rpm/redhat/katello@1.1.12.2-5?arch=el6cf

purl pkg:rpm/redhat/katello@1.1.12.2-5?arch=el6cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-67r2-k4bt-yqcr

vulnerability	VCID-6h6n-7frd-1ked

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/katello@1.1.12.2-5%3Farch=el6cf

url pkg:rpm/redhat/katello@1.2.1.1-1h?arch=el6_4

purl pkg:rpm/redhat/katello@1.2.1.1-1h?arch=el6_4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6h6n-7frd-1ked

vulnerability	VCID-9qc2-be2u-vfgv

vulnerability	VCID-c3cm-h13f-jubq

vulnerability	VCID-ebq1-gkhe-pua7

vulnerability	VCID-hbtn-7423-m3gb

vulnerability	VCID-pb4n-q6u8-syds

vulnerability	VCID-y12d-fjpf-uubh

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/katello@1.2.1.1-1h%3Farch=el6_4

url pkg:rpm/redhat/katello-cli@1.1.8-14?arch=el6cf

purl pkg:rpm/redhat/katello-cli@1.1.8-14?arch=el6cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-67r2-k4bt-yqcr

vulnerability	VCID-6h6n-7frd-1ked

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/katello-cli@1.1.8-14%3Farch=el6cf

url pkg:rpm/redhat/katello-configure@1.1.9-13?arch=el6cf

purl pkg:rpm/redhat/katello-configure@1.1.9-13?arch=el6cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-67r2-k4bt-yqcr

vulnerability	VCID-6h6n-7frd-1ked

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/katello-configure@1.1.9-13%3Farch=el6cf

url pkg:rpm/redhat/katello-configure@1.2.3.1-4h?arch=el6_4

purl pkg:rpm/redhat/katello-configure@1.2.3.1-4h?arch=el6_4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6h6n-7frd-1ked

vulnerability	VCID-9qc2-be2u-vfgv

vulnerability	VCID-c3cm-h13f-jubq

vulnerability	VCID-ebq1-gkhe-pua7

vulnerability	VCID-hbtn-7423-m3gb

vulnerability	VCID-pb4n-q6u8-syds

vulnerability	VCID-y12d-fjpf-uubh

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/katello-configure@1.2.3.1-4h%3Farch=el6_4

url pkg:rpm/redhat/katello-selinux@1.1.1-5?arch=el6cf

purl pkg:rpm/redhat/katello-selinux@1.1.1-5?arch=el6cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-67r2-k4bt-yqcr

vulnerability	VCID-6h6n-7frd-1ked

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/katello-selinux@1.1.1-5%3Farch=el6cf

url pkg:rpm/redhat/rubygem-actionpack@1:3.0.10-12?arch=el6cf

purl pkg:rpm/redhat/rubygem-actionpack@1:3.0.10-12?arch=el6cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6h6n-7frd-1ked

vulnerability	VCID-9qc2-be2u-vfgv

vulnerability	VCID-c3cm-h13f-jubq

vulnerability	VCID-ebq1-gkhe-pua7

vulnerability	VCID-hbtn-7423-m3gb

vulnerability	VCID-pb4n-q6u8-syds

vulnerability	VCID-y12d-fjpf-uubh

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-actionpack@1:3.0.10-12%3Farch=el6cf

url pkg:rpm/redhat/rubygem-activemodel@3.0.10-3?arch=el6cf

purl pkg:rpm/redhat/rubygem-activemodel@3.0.10-3?arch=el6cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6h6n-7frd-1ked

vulnerability	VCID-9qc2-be2u-vfgv

vulnerability	VCID-c3cm-h13f-jubq

vulnerability	VCID-ebq1-gkhe-pua7

vulnerability	VCID-hbtn-7423-m3gb

vulnerability	VCID-pb4n-q6u8-syds

vulnerability	VCID-y12d-fjpf-uubh

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-activemodel@3.0.10-3%3Farch=el6cf

url pkg:rpm/redhat/rubygem-delayed_job@2.1.4-3?arch=el6cf

purl pkg:rpm/redhat/rubygem-delayed_job@2.1.4-3?arch=el6cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6h6n-7frd-1ked

vulnerability	VCID-91xe-ev7t-akb9

vulnerability	VCID-9qc2-be2u-vfgv

vulnerability	VCID-9uh8-upzm-7bgd

vulnerability	VCID-c3cm-h13f-jubq

vulnerability	VCID-ebq1-gkhe-pua7

vulnerability	VCID-hbtn-7423-m3gb

vulnerability	VCID-pb4n-q6u8-syds

vulnerability	VCID-teq8-nqhf-xbbq

vulnerability	VCID-vspr-h3ds-dudq

vulnerability	VCID-y12d-fjpf-uubh

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-delayed_job@2.1.4-3%3Farch=el6cf

url pkg:rpm/redhat/rubygem-json@1.7.3-2?arch=el6_3

purl pkg:rpm/redhat/rubygem-json@1.7.3-2?arch=el6_3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6h6n-7frd-1ked

vulnerability	VCID-9qc2-be2u-vfgv

vulnerability	VCID-c3cm-h13f-jubq

vulnerability	VCID-ebq1-gkhe-pua7

vulnerability	VCID-hbtn-7423-m3gb

vulnerability	VCID-pb4n-q6u8-syds

vulnerability	VCID-y12d-fjpf-uubh

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-json@1.7.3-2%3Farch=el6_3

url pkg:rpm/redhat/rubygem-nokogiri@1.5.0-0.9.beta4?arch=el6cf

purl pkg:rpm/redhat/rubygem-nokogiri@1.5.0-0.9.beta4?arch=el6cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6h6n-7frd-1ked

vulnerability	VCID-91xe-ev7t-akb9

vulnerability	VCID-9qc2-be2u-vfgv

vulnerability	VCID-9uh8-upzm-7bgd

vulnerability	VCID-c3cm-h13f-jubq

vulnerability	VCID-ebq1-gkhe-pua7

vulnerability	VCID-hbtn-7423-m3gb

vulnerability	VCID-pb4n-q6u8-syds

vulnerability	VCID-t9j5-gkyc-gbhw

vulnerability	VCID-teq8-nqhf-xbbq

vulnerability	VCID-vspr-h3ds-dudq

vulnerability	VCID-y12d-fjpf-uubh

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-nokogiri@1.5.0-0.9.beta4%3Farch=el6cf

url pkg:rpm/redhat/rubygem-rack@1:1.3.0-4?arch=el6cf

purl pkg:rpm/redhat/rubygem-rack@1:1.3.0-4?arch=el6cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6h6n-7frd-1ked

vulnerability	VCID-9qc2-be2u-vfgv

vulnerability	VCID-c3cm-h13f-jubq

vulnerability	VCID-ebq1-gkhe-pua7

vulnerability	VCID-hbtn-7423-m3gb

vulnerability	VCID-pb4n-q6u8-syds

vulnerability	VCID-y12d-fjpf-uubh

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-rack@1:1.3.0-4%3Farch=el6cf

url pkg:rpm/redhat/rubygem-rails_warden@0.5.5-2?arch=el6cf

purl pkg:rpm/redhat/rubygem-rails_warden@0.5.5-2?arch=el6cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6h6n-7frd-1ked

vulnerability	VCID-91xe-ev7t-akb9

vulnerability	VCID-9qc2-be2u-vfgv

vulnerability	VCID-9uh8-upzm-7bgd

vulnerability	VCID-c3cm-h13f-jubq

vulnerability	VCID-ebq1-gkhe-pua7

vulnerability	VCID-hbtn-7423-m3gb

vulnerability	VCID-pb4n-q6u8-syds

vulnerability	VCID-teq8-nqhf-xbbq

vulnerability	VCID-vspr-h3ds-dudq

vulnerability	VCID-y12d-fjpf-uubh

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-rails_warden@0.5.5-2%3Farch=el6cf

url pkg:rpm/redhat/rubygem-rdoc@3.8-6?arch=el6cf

purl pkg:rpm/redhat/rubygem-rdoc@3.8-6?arch=el6cf

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6h6n-7frd-1ked

vulnerability	VCID-91xe-ev7t-akb9

vulnerability	VCID-9qc2-be2u-vfgv

vulnerability	VCID-9uh8-upzm-7bgd

vulnerability	VCID-c3cm-h13f-jubq

vulnerability	VCID-ebq1-gkhe-pua7

vulnerability	VCID-hbtn-7423-m3gb

vulnerability	VCID-pb4n-q6u8-syds

vulnerability	VCID-teq8-nqhf-xbbq

vulnerability	VCID-vspr-h3ds-dudq

vulnerability	VCID-y12d-fjpf-uubh

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-rdoc@3.8-6%3Farch=el6cf

url pkg:rpm/redhat/thumbslug@0.0.28.1-1?arch=el6_4

purl pkg:rpm/redhat/thumbslug@0.0.28.1-1?arch=el6_4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6h6n-7frd-1ked

vulnerability	VCID-9qc2-be2u-vfgv

vulnerability	VCID-c3cm-h13f-jubq

vulnerability	VCID-ebq1-gkhe-pua7

vulnerability	VCID-hbtn-7423-m3gb

vulnerability	VCID-pb4n-q6u8-syds

vulnerability	VCID-y12d-fjpf-uubh

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thumbslug@0.0.28.1-1%3Farch=el6_4

References

reference_url	http://rhn.redhat.com/errata/RHSA-2013-0547.html
reference_id
reference_type
scores
url	http://rhn.redhat.com/errata/RHSA-2013-0547.html

reference_url	http://rhn.redhat.com/errata/RHSA-2013-0686.html
reference_id
reference_type
scores
url	http://rhn.redhat.com/errata/RHSA-2013-0686.html

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6116.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6116.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2012-6116

reference_id

reference_type

scores

value	0.0007
scoring_system	epss
scoring_elements	0.21478
published_at	2026-04-16T12:55:00Z

value	0.0007
scoring_system	epss
scoring_elements	0.21449
published_at	2026-04-01T12:55:00Z

value	0.0007
scoring_system	epss
scoring_elements	0.21617
published_at	2026-04-02T12:55:00Z

value	0.0007
scoring_system	epss
scoring_elements	0.21674
published_at	2026-04-04T12:55:00Z

value	0.0007
scoring_system	epss
scoring_elements	0.2143
published_at	2026-04-07T12:55:00Z

value	0.0007
scoring_system	epss
scoring_elements	0.21507
published_at	2026-04-08T12:55:00Z

value	0.0007
scoring_system	epss
scoring_elements	0.21566
published_at	2026-04-09T12:55:00Z

value	0.0007
scoring_system	epss
scoring_elements	0.21577
published_at	2026-04-11T12:55:00Z

value	0.0007
scoring_system	epss
scoring_elements	0.21538
published_at	2026-04-12T12:55:00Z

value	0.0007
scoring_system	epss
scoring_elements	0.21483
published_at	2026-04-13T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2012-6116

reference_url	http://secunia.com/advisories/52774
reference_id
reference_type
scores
url	http://secunia.com/advisories/52774

reference_url	https://github.com/jsomara/katello/commit/65f1e42b7bda0f3410931c50598540d944d8bf0d
reference_id
reference_type
scores
url	https://github.com/jsomara/katello/commit/65f1e42b7bda0f3410931c50598540d944d8bf0d

reference_url	https://github.com/Katello/katello/commits/master/katello-configure/katello-configure.spec
reference_id
reference_type
scores
url	https://github.com/Katello/katello/commits/master/katello-configure/katello-configure.spec

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=906207
reference_id	906207
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=906207

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:katello:katello:-:::::::*
reference_id	cpe:2.3:a:katello:katello:-:::::::*
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:katello:katello:-:::::::*

reference_url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:katello:katello-configure::::::::
reference_id	cpe:2.3:a:katello:katello-configure::::::::
reference_type
scores
url	https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:katello:katello-configure::::::::

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2012-6116

reference_id

CVE-2012-6116

reference_type

scores

value	2.1
scoring_system	cvssv2
scoring_elements	AV:L/AC:L/Au:N/C:N/I:P/A:N

url

https://nvd.nist.gov/vuln/detail/CVE-2012-6116

reference_url	https://access.redhat.com/errata/RHSA-2013:0547
reference_id	RHSA-2013:0547
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2013:0547

reference_url	https://access.redhat.com/errata/RHSA-2013:0686
reference_id	RHSA-2013:0686
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2013:0686

Weaknesses

cwe_id	264
name	Permissions, Privileges, and Access Controls
description	Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Exploits

Severity_range_score 2.1 - 2.1

Exploitability 0.5

Weighted_severity 1.9

Risk_score 0.9

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6h6n-7frd-1ked

Vulnerability Instance