Read the docs

Katello

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Katello records in CISA KEV

No Katello vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Katello 5 records MEDIUM Katello-configure 1 record LOW Katello Installer 1 record LOW

Records

1 record in Katello Installer · all components

TI-2013-03906 CVE-2013-4455 · GHSA-ccc5-f7mc-225j

Katello Installer before 0.0.18 uses world-readable permissions for…

Priority LOW 12

Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by reading the file.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00456 Published 2014-05-14 No fix listed CWE-264
Open these records in search →