CVEvulnerability

CVE-2013-4455

2.1 LOW Published 2014-05-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2014-05-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-264

Description

Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by reading the file.

Affected configurations

• katello katello installer (<= 0.0.17) • katello katello installer 0.0.1 • katello katello installer 0.0.2 • katello katello installer 0.0.3 • katello katello installer 0.0.4 • katello katello installer 0.0.5 • katello katello installer 0.0.6 • katello katello installer 0.0.7 • katello katello installer 0.0.8 • katello katello installer 0.0.9 • katello katello installer 0.0.10 • katello katello installer 0.0.11 • katello katello installer 0.0.12 • katello katello installer 0.0.13 • katello katello installer 0.0.14 • katello katello installer 0.0.15 • katello katello installer 0.0.16

Related

Weakness · not in database (1)

References