[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSYwSJ1RFt0sLsiaU1fTKRA6VRD6q0j_mp0uI6Wzyj3k":3,"g5a-risk:CVE-2012-3503":156},{"success":4,"data":5,"meta":154},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":27,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":59,"references":60,"referencesCount":100,"weaknesses":101,"weaknessesCount":110,"isActivelyExploited":43,"cisaInfo":27,"otxData":27,"relatedBlogPosts":111,"seoMetadata":112,"configurations":137,"relatedVendorCves":152,"notableEvents":153},"CVE-2012-3503","What is CVE-2012-3503?","The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installation to have the same secret token, and allows remote attackers to authenticate to the CloudForms System Engine web interface as an arbitrary user by creating a cookie using the default secret_token.","The installation script in Katello 1.0 and earlier does not properly generate the Application.config.secret_token value, which causes each default installati...","2012-08-25T10:29:52.693","2026-06-16T23:43:21.807",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":44},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[],[32],{"Source":17,"Type":18,"CVSSData":33,"BaseSeverity":40,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":43,"ObtainAllPrivilege":43,"ObtainUserPrivilege":43,"ObtainOtherPrivilege":43,"UserInteractionRequired":43},{"Version":34,"VectorString":35,"AccessVector":21,"AccessComplexity":22,"Authentication":36,"ConfidentialityImpact":37,"IntegrityImpact":37,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":39,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"","MEDIUM",8,6.4,false,[],0.03002,[45,45,45,45,45,45,45],"Critical",[49,54],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"theforeman","katello","*","cpe:2.3:a:theforeman:katello:*:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"redhat","enterprise_linux_server","6.0","cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",2,[61,67,70,74,79,84,88,90,92,94,96,98],{"url":62,"source":63,"tags":64},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2012-1186.html","Red Hat",[65,66],"Broken Link","Third Party Advisory",{"url":68,"source":63,"tags":69},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2012-1187.html",[66],{"url":71,"source":72,"tags":73},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F50344","Secunia",[65],{"url":75,"source":76,"tags":77},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F55140","Securityfocus",[65,66,78],"VDB Entry",{"url":80,"source":81,"tags":82},"https:\u002F\u002Fgithub.com\u002FKatello\u002Fkatello\u002Fcommit\u002F7c256fef9d75029d0ffff58ff1dcda915056d3a3","GitHub",[83],"Patch",{"url":85,"source":81,"tags":86},"https:\u002F\u002Fgithub.com\u002FKatello\u002Fkatello\u002Fpull\u002F499",[87],"Issue Tracking",{"url":62,"source":63,"tags":89},[65,66],{"url":68,"source":63,"tags":91},[66],{"url":71,"source":72,"tags":93},[65],{"url":75,"source":76,"tags":95},[65,66,78],{"url":80,"source":81,"tags":97},[83],{"url":85,"source":81,"tags":99},[87],12,[102],{"id":103,"name":104,"description":105,"extendedDescription":106,"status":107,"abstraction":108,"structure":109},"CWE-798","Use of Hard-coded Credentials","The product contains hard-coded credentials, such as a password or cryptographic key.","There are two main variations:","Draft","Base","Simple",1,[],{"title":113,"metaDescription":114,"keywords":115,"canonicalUrl":116,"structuredData":117},"What is CVE-2012-3503? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2012-3503, a critical severity cyber security vulnerability from 2012. The installation script in Katello 1.0 and earlier does ...","CVE-2012-3503, CVE-2012-3503 vulnerability, CVE-2012-3503 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2012, CVSS score, exploit, patch, remediation, theforeman security, redhat security, katello vulnerability, enterprise_linux_server vulnerability","\u002Fwhat-is\u002Fcve-2012-3503",{"@context":118,"@type":119,"headline":113,"description":114,"datePublished":10,"dateModified":11,"author":120,"publisher":124,"about":128,"mainEntityOfPage":132,"articleSection":135,"keywords":136},"https:\u002F\u002Fschema.org","TechArticle",{"@type":121,"name":122,"url":123},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":121,"name":122,"url":123,"logo":125},{"@type":126,"url":127},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":129,"name":6,"description":130,"additionalType":131},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":133,"@id":134},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2012-3503","Cybersecurity","CVE-2012-3503, CVE-2012-3503 vulnerability, CVE-2012-3503 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[138,146],{"Operator":27,"Negate":27,"Nodes":139},[140],{"Operator":141,"Negate":43,"CPEMatch":142},"OR",[143],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":144,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":145},"F34B126E-E093-4F11-A230-6104EE2457FF","1.0",{"Operator":27,"Negate":27,"Nodes":147},[148],{"Operator":141,"Negate":43,"CPEMatch":149},[150],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":151,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9BBCD86A-E6C7-4444-9D74-F861084090F0",[],[],{"lastModified":11,"cacheTime":155,"version":34},1792256775718,{"score":157,"band":158,"action":159,"scoredAt":160},54,"Medium","Plan remediation","2026-10-17T06:39:00.934174+00:00"]