PT-2013-1805
CVE-2012-5561
·
تاريخ النشر
2013-03-01
·
تاريخ التحديث
2013-03-01
الوصف من
CVSS 2.0
2.1
منخفضةالمقاييسAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Katello version 1.1
Description
The issue concerns the script/katello-generate-passphrase in Katello, which uses world-readable permissions for the /etc/katello/secure/passphrase file. This allows local users to obtain the passphrase by reading the file.
Recommendations
For Katello version 1.1, consider changing the permissions of the /etc/katello/secure/passphrase file to restrict access and prevent local users from reading the passphrase.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾