CVE-2010-2450

The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in…

published November 7, 2019

CVSS
—
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key is world readable by default.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01200 · 67.9th percentile
Published
2019-11-07T20:06Z
EPSS history
Timeline
  • 07 NOV 20:06Z
    The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in…
    cvelistv5