script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file.
References
Configurations
Information
Published : 2013-02-28 21:40
Updated : 2013-03-01 07:51
NVD link : CVE-2012-5561
Mitre link : CVE-2012-5561
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
katello
- katello