CVE-2012-0433 insecure permissions on files containing confidential data
MediumCVSS 5.5
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confidential data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE crowbar | < 2012-10-02 | 2012-10-02 |
| crowbar project crowbar | <= 1.0 | No fix listed |