Security Advisory

CVE-2012-6116

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-03-01 02:00:00

Last updated 2024-08-06 21:28:39

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.

← Browse all CVEs View on cve.org ↗