← volver
CVE-2012-6116

CVE-2012-6116

EPSS 0.2%
modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://rhn.redhat.com/errata/RHSA-2013-0547.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0686.htmlhttp://secunia.com/advisories/52774https://github.com/jsomara/katello/commit/65f1e42b7bda0f3410931c50598540d944d8bf0dhttps://github.com/Katello/katello/commits/master/katello-configure/katello-configure.spec