Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2vgj-j756-9gpx

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

EPSS

Процентиль: 53%
0.00297
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 8 лет назад

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

redhat
больше 10 лет назад

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

CVSS3: 9.8
nvd
больше 8 лет назад

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

CVSS3: 9.8
debian
больше 8 лет назад

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate ...

EPSS

Процентиль: 53%
0.00297
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-200