title: Red Hat Security Advisory: CloudForms System Engine 1.1 update
description: katello: pulp admin password logged in plaintext in world-readable katello/production.log pulp /etc/pulp/pulp.conf world readable, contains default admin password Katello: lack of authorization in proxies_controller.rb grinder: /var/lib/pulp/cache/grinder directory is world-writeable
cpes: cpe:/a:cloudforms_systemengine:1::el6 cpe:/a:cloudforms_tools:1::el5 cpe:/a:cloudforms_tools:1::el6