CVE-2012-5535

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

gnome-system-log polkit policy allows arbitrary files on the system to be read

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
gnome-system-log	gnome-system-log	< 3.4.1

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094059.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094181.htmlThird Party Advisory
https://access.redhat.com/security/cve/cve-2012-5535Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5535Exploit, Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2012-5535Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094059.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094181.htmlThird Party Advisory
https://access.redhat.com/security/cve/cve-2012-5535Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5535Exploit, Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2012-5535Third Party Advisory

Timeline

Published: Nov 25, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-55366.2A certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and Fedora Rawhide calls the glibc error funct CVE-2012-55376.0The Simplenews Scheduler module 6.x-2.x before 6.x-2.4 for Drupal allows remote authenticated users with the "send scheduled newsletters" pe CVE-2012-55382.1Cross-site scripting (XSS) vulnerability in the FileField Sources module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.6 for Drupal, when CVE-2012-55393.5The Organic Groups (OG) module 7.x-1.x before 7.x-1.5 for Drupal does not properly maintain pending group memberships, which allows remote a CVE-2012-55404.3Multiple cross-site scripting (XSS) vulnerabilities in the Hostip module 6.x-2.x before 6.x-2.2 and 7.x-2.x before 7.x-2.2 for Drupal allow CVE-2012-55414.3Cross-site scripting (XSS) vulnerability in the Twitter Pull module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.0-rc3 for Drupal allows CVE-2012-55426.8Cross-site request forgery (CSRF) vulnerability in the Commerce Extra Panes module 7.x-1.x before 7.x-1.1 in Drupal allows remote attackers CVE-2012-55434.3The Feeds module 7.x-2.x before 7.x-2.0-alpha6 for Drupal, when a field is mapped to the node's author, does not properly check permissions,CVE-2012-55444.0The Mandrill module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to obtain password reset links by reading the logs i CVE-2012-55452.1Multiple cross-site scripting (XSS) vulnerabilities in the ShareThis module 7.x-2.x before 7.x-2.5 for Drupal allow remote authenticated use CVE-2012-55476.8Multiple cross-site request forgery (CSRF) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.3 for Drupal allow remote attackers CVE-2012-55484.3Cross-site scripting (XSS) vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to inject arbitrary web scr