CVE-2012-6116

Description

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.

References

https://github.com/jsomara/katello/commit/65f1e42b7bda0f3410931c50598540d944d8bf0d

https://github.com/Katello/katello/commits/master/katello-configure/katello-configure.spec

http://secunia.com/advisories/52774

http://rhn.redhat.com/errata/RHSA-2013-0686.html

http://rhn.redhat.com/errata/RHSA-2013-0547.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3