exploitDog

CVE-2012-6116

Опубликовано: 21 фев. 2013

Источник: redhat

CVSS2: 4.6

EPSS Низкий

Описание

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2012-6116
https://nvd.nist.gov/vuln/detail/CVE-2012-6116

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=906207Candlepin: bootstrap RPM deploys CA certificate file with mode 666

EPSS

Процентиль: 14%

0.00229

Низкий

4.6 Medium

CVSS2

Связанные уязвимости

CVE-2012-6116

nvd

больше 13 лет назад

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.

CVE-2012-6116

debian

больше 13 лет назад

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pu ...

GHSA-h3g7-crqm-323f

github

около 4 лет назад

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.

EPSS

Процентиль: 14%

0.00229

Низкий

4.6 Medium

CVSS2