← back
CVE-2012-6116

CVE-2012-6116

EPSS 0.2%
modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://rhn.redhat.com/errata/RHSA-2013-0547.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0686.htmlhttp://secunia.com/advisories/52774https://github.com/jsomara/katello/commit/65f1e42b7bda0f3410931c50598540d944d8bf0dhttps://github.com/Katello/katello/commits/master/katello-configure/katello-configure.spec