Jeremy Cline

The issue concerns a world-readable file containing the private key for the Node certificate, stored in the "/etc/pki/pulp/nodes/" directory. This allows local users to access sensitive data, potentially gaining access to the private key information.

The issue allows local users to leak keys or write to arbitrary files via a symlink attack, specifically targeting the pulp-gen-nodes-certificate script in Pulp.

The issue arises during the installation process of Pulp, where the `pulp.spec` generates RSA key pairs in a world-readable directory before modifying the permissions. This might allow local users to read the generated RSA keys by accessing the key files while the installation is in progress.

The issue allows remote authenticated users to obtain consumer private keys and escalate privileges. This is due to the world-readable writing of consumer private keys to etc/pki/pulp/consumer/consumer-cert.pem. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.