2.1
CVSSv2

CVE-2012-5561

Published: 01/03/2013 Updated: 01/03/2013
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

katello katello 1.1

Vendor Advisories

Synopsis Important: Subscription Asset Manager 12 update Type/Severity Security Advisory: Important Topic Red Hat Subscription Asset Manager 12, which fixes several securityissues, multiple bugs, and adds various enhancements, is now availableThe Red Hat Security Response Team has rated this update as ha ...