CVE-2012-6116 modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA c...
LowCVSS 2.1
EPSS 0.23%
- Published
- Updated
- Exploit status
- No public exploit known
Description
modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| katello | All versions | No fix listed |
| katello-configure | <= 1.3.2_pulpv2 | No fix listed |
References
- RHSA-2013:0547 vendor-advisory
- RHSA-2013:0686 vendor-advisory
- 52774 third-party-advisory
- github.com
- github.com