Security Advisory

CVE-2015-1415

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-04-10 14:00:00

Last updated 2024-08-06 04:40:18

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The bsdinstall installer in FreeBSD 10.x before 10.1 p9, when configuring full disk encrypted ZFS, uses world-readable permissions for the GELI keyfile (/boot/encryption.key), which allows local users to obtain sensitive key information by reading the file.

← Browse all CVEs View on cve.org ↗