Red Hat Security AdvisoryRHSA-2013:0547
CloudForms System Engine 1.1.2 update
Released 2013-02-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- CloudForms System Engine for RHEL 6 Server candlepin-0.7.19-3.el6cf, candlepin-devel-0.7.19-3.el6cf, candlepin-selinux-0.7.19-3.el6cf +11
Fixes 2 records
Priority LOW 11
modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writin…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00229 · Published 2013-03-01 · Fixed CWE-264
Priority LOW 11
script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00341 · Published 2013-03-01 · Fixed CWE-200
