Red Hat Security AdvisoryRHSA-2009:0006
rhpki security and bug fix update
Released 2009-01-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Certificate System 7.2 for 4AS pkisetup-7.2.0-7, rhpki-ca-7.2.0-6, rhpki-common-7.2.0-16 +5
- Red Hat Certificate System 7.2 for 4ES pkisetup-7.2.0-7, rhpki-ca-7.2.0-6, rhpki-common-7.2.0-16 +5
Fixes 2 records
Priority LOW 11
Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00243 · Published 2009-01-20 · Fixed CWE-255
Priority LOW 11
Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00243 · Published 2009-01-20 · Fixed CWE-264
