CVE-2012-4430: The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules,...

Security readout for executives and security teams

CVE-2012-4430 is an access-control flaw in Bacula before 5.2.11. An authenticated remote console user could obtain resource dump information that ACLs should have blocked. This matters because backup systems often expose sensitive operational details, but the source bundle does not show unauthenticated access or active exploitation. Exposure is most likely where Bacula Director/console deployments before 5.2.11 still exist and allow remote authenticated console access. Risk depends on console account privileges, ACL configuration, and network reachability of the management interface. Prioritize remediation for any internet-reachable or broadly accessible Bacula management environment. For isolated, retired, or tightly restricted legacy systems, handle through normal vulnerability management after confirming version and access controls. Mitigation focus: Upgrade Bacula to 5.2.11 or later, or a vendor-fixed package.; Apply relevant distribution advisories, including Debian DSA-2558 where applicable.; Restrict Bacula console access to trusted administrators and management networks..

Prepared

Jun 27, 2026, 16:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.