Security Advisory

CVE-2013-4455

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-05-14 19:00:00
Last updated 2024-08-06 16:45:14
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by reading the file.