CVE-2012-5561

Name of the Vulnerable Software and Affected Versions Katello version 1.1

Description The issue concerns the script/katello-generate-passphrase in Katello, which uses world-readable permissions for the /etc/katello/secure/passphrase file. This allows local users to obtain the passphrase by reading the file.

Recommendations For Katello version 1.1, consider changing the permissions of the /etc/katello/secure/passphrase file to restrict access and prevent local users from reading the passphrase.