The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confidential data.
CVSS 3.0MEDIUM 5.5·Local·Low privileges·No interaction·EPSS 0.00292·Published 2018-06-08·Fixed in 2012-10-02CWE-732