← voltar
CVE-2012-6116

CVE-2012-6116

EPSS 0.2%
modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://rhn.redhat.com/errata/RHSA-2013-0547.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0686.htmlhttp://secunia.com/advisories/52774https://github.com/jsomara/katello/commit/65f1e42b7bda0f3410931c50598540d944d8bf0dhttps://github.com/Katello/katello/commits/master/katello-configure/katello-configure.spec