CVE-2013-4455

Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local…

published May 14, 2014

CVSS
—
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by reading the file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.6th percentile
Published
2014-05-14T19:00Z
EPSS history
Timeline
  • 14 MAY 19:00Z
    Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local…
    cvelistv5