Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-2450

Опубликовано: 07 нояб. 2019
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key is world readable by default.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:shibboleth:service_provider:2.0:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 37%
0.00163
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

ubuntu логотип

CVE-2010-2450

CVSS3: 7.5
ubuntu
около 6 лет назад

The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key is world readable by default.

debian логотип

CVE-2010-2450

CVSS3: 7.5
debian
около 6 лет назад

The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/s ...

github логотип

GHSA-9cvv-j545-66mj

github
почти 4 года назад

The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key is world readable by default.

EPSS

Процентиль: 37%
0.00163
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200