Search vulnerabilities

Results 1

Export CSV
CVE-2012-6116

Candlepin: bootstrap RPM deploys CA certificate file with mode 666

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Products