Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2012-6116

Опубликовано: 21 фев. 2013
Источник: redhat
CVSS2: 4.6

Описание

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.

Ссылки на источники

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=906207Candlepin: bootstrap RPM deploys CA certificate file with mode 666

4.6 Medium

CVSS2

Связанные уязвимости

nvd логотип

CVE-2012-6116

nvd
почти 13 лет назад

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.

debian логотип

CVE-2012-6116

debian
почти 13 лет назад

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pu ...

github логотип

GHSA-h3g7-crqm-323f

github
больше 3 лет назад

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.

4.6 Medium

CVSS2