Security Advisory
CVE-2008-2367
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files.