Skip to content
Fencer Intel
low 1.9

CVE-2014-0135 json

Kafo allows local users to obtain passwords and other sensitive information by reading default_values.yaml

published 2014-05-08 12 y ago modified 2026-06-17 4 mo ago also GHSA-hxvp-655x-xxqv , EUVD-2022-4250

cvss
1.9
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 26%
public exploits
0
none known

Summary

Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml, which allows local users to obtain passwords and other sensitive information by reading the file.

Patch / fix

  • rubygems kafo 0.3.17, 0.5.2
  • v8 satellite capsule 6.0, satellite 6.0 1:3.14.5.10-9.el6sat
  • v8 satellite capsule 6.0, satellite 6.0 1:3.14.5.10-11.el7sat
  • foreman satellite 6.0 1.6.0.44-1.el6sat
  • foreman satellite 6.0 1.6.0.44-1.el7sat
  • katello satellite 6.0 1.5.0-30.el6sat
  • katello satellite 6.0 1.5.0-30.el7sat
  • mongodb satellite capsule 6.0, satellite 6.0 2.4.6-2.el6sat
  • mongodb satellite capsule 6.0, satellite 6.0 2.4.9-3.el7sat

red hat advisories RHEA-2014:1175

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2014-0135 updated cvss 4.6

rubygem-kafo: temporary file creation vulnerability when creating /tmp/default_values.yaml

  • Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) rubygem-kafo Red Hat OpenStack Platform 4 rubygem-kafo
    affected: no fix planned “Will not fix”
  • Red Hat Satellite 6.0 rubygem-kafo 0.6.4-2.el6sat, rubygem-kafo 0.6.4-2.el7sat, rubygem-kafo_parsers 0.0.3-2.el6sat, rubygem-kafo_parsers 0.0.3-2.el7sat Red Hat Satellite Capsule 6.0 rubygem-kafo 0.6.4-2.el6sat, rubygem-kafo 0.6.4-2.el7sat, rubygem-kafo_parsers 0.0.3-2.el6sat, rubygem-kafo_parsers 0.0.3-2.el7sat
    fixed: vendor fix RHEA-2014:1175
  • Red Hat Satellite 6.0 jansi 1.9-7.el7, bsf 2.4.0-19.el7, cglib 2.2-18.el7, guava 13.0-6.el7, xbean 3.13-6.el7, hawtjni 1.6-9.el7, +755 more Red Hat Satellite 6.0 - Optional ant-jmf 1.9.2-9.el7, ant-jsch 1.9.2-9.el7, ant-antlr 1.9.2-9.el7, ant-swing 1.9.2-9.el7, ant-manual 1.9.2-9.el7, ant-javadoc 1.9.2-9.el7, +21 more Red Hat Satellite Capsule 6.0 hiera 1.3.1-2.el7, hiera 1.0.0-3.el6_4, gofer 1.3.0-1.el6sat, gofer 1.3.0-1.el7sat, qpid-cpp 0.22-42.el6, qpid-cpp 0.22-42.el7, +215 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

0.33% chance of exploitation in the next 30 days, higher than 26% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 2.0 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N

Affected packages

ecosystem package affected fixed in
rubygems kafo
<0.3.17
>=0.4.0, <0.5.2
0.3.17
0.5.2

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.