01 Record

CVE-2013-2069

Red Hat livecd-tools before 13.4.4, 17.x before 17.17, 18.x before 18.16, and 19.x before 19.3, when a rootpw directive is not set in a Kickstart file, sets the root user password to empty, which

UnratedPUBLISHEDCNA: redhat

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Red Hat livecd-tools before 13.4.4, 17.x before 17.17, 18.x before 18.16, and 19.x before 19.3, when a rootpw directive is not set in a Kickstart file, sets the root user password to empty, which

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.34% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 27.7% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2013-05-29 00:00Z13 YR AGO

Last updated

2024-08-06 15:27Z2 YR AGO

Reserved

2013-02-19

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-264
CWE-798Use of Hard-coded CredentialsBase

Data version

5.1

Document digest

27ec91a2a74642385fddd026c67ddc4a0f486911e87a2bf2f5dbc230491148cf

05 Affected products

VendorProductVersionsPlatforms

redhatenterprise_linuxNot specified—

redhatjboss_enterprise_application_platformNot specified—

redhatlivecd-toolsNot specified—

redhatstorageNot specified—

06 References

aws.amazon.comhttps://aws.amazon.com/security/security-bulletins/red-hat-and-other-third-party-public-amis-security-concern/x_refsource_CONFIRM
www.securityfocus.com60119http://www.securityfocus.com/bid/60119vdb-entryx_refsource_BID
exchange.xforce.ibmcloud.comredhat-cve20132069-livecd-security-bypass(84488)https://exchange.xforce.ibmcloud.com/vulnerabilities/84488vdb-entryx_refsource_XF
www.openwall.com[oss-security] 20130523 CVE-2013-2069 livecd-tools: improper handling of passwordshttp://www.openwall.com/lists/oss-security/2013/05/23/2mailing-listx_refsource_MLIST
bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=964299x_refsource_CONFIRM
rhn.redhat.comRHSA-2013:0849http://rhn.redhat.com/errata/RHSA-2013-0849.htmlvendor-advisoryx_refsource_REDHAT