authd sets weak permissions for /etc/ident.key, which allows local users to obtain the key by leveraging a race condition between the creation of the key, and the chmod to protect it.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1346051 | Issue Tracking Third Party Advisory |
Configurations
Information
Published : 2017-07-17 06:18
Updated : 2017-08-09 08:10
NVD link : CVE-2016-4982
Mitre link : CVE-2016-4982
JSON object : View
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Products Affected
teether
- authd