authd sets weak permissions for /etc/ident.key, which allows local users to obtain the key by leveraging a race condition between the creation of the key, and the chmod to protect it.
CVSS 3.0MEDIUM 4.7·Local·Low privileges·No interaction·EPSS 0.00177·Published 2017-07-14·Will not fixCWE-362