← All advisories

Medium severity6.2NVD Advisory· Published Nov 25, 2019· Updated Jun 16, 2026

CVE-2012-5578

CVE-2012-5578

Description

Python keyring has insecure permissions on new databases allowing world-readable files to be created

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
keyringPyPI	< 0.10	0.10

Affected products

3

Python (programming language)/Keyring
cpe:2.3:a:python:keyring:*:*:*:*:*:*:*:*
Range: <=0.10
ghsa-coords
pkg:pypi/keyring
Range: < 0.10
Python/Python keyringv5
Range: <= 0.10

Patches

Vulnerability mechanics

References

10

bugs.launchpad.net/ubuntu/+source/python-keyring/+bug/1031465nvdIssue TrackingPatchThird Party AdvisoryWEB
www.openwall.com/lists/oss-security/2012/11/27/4nvdMailing ListThird Party AdvisoryWEB
access.redhat.com/security/cve/cve-2012-5578nvdThird Party AdvisoryWEB
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party AdvisoryWEB
bugzilla.suse.com/show_bug.cginvdIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-8867-vpm3-g98gghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2012-5578ghsaADVISORY
security-tracker.debian.org/tracker/CVE-2012-5578nvdThird Party AdvisoryWEB
github.com/jaraco/keyring/blob/master/CHANGES.rstghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/keyring/PYSEC-2019-182.yamlghsaWEB

News mentions

0

No linked articles in our index yet.