CVEvulnerability
CVE-2008-2368
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2009-01-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files.
Affected configurations
• redhat certificate system 7.2
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/33540 Vendor Advisory
- http://securitytracker.com/id?1021608 securitytracker.com
- http://www.securityfocus.com/bid/33288 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/0145 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=452000 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48022 exchange.xforce.ibmcloud.com
- https://rhn.redhat.com/errata/RHSA-2009-0006.html Vendor Advisory
- https://rhn.redhat.com/errata/RHSA-2009-0007.html rhn.redhat.com
- http://secunia.com/advisories/33540 Vendor Advisory
- http://securitytracker.com/id?1021608 securitytracker.com
- http://www.securityfocus.com/bid/33288 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/0145 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=452000 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48022 exchange.xforce.ibmcloud.com
- https://rhn.redhat.com/errata/RHSA-2009-0006.html Vendor Advisory
- https://rhn.redhat.com/errata/RHSA-2009-0007.html rhn.redhat.com