NVD

Id
47062  
Name
CVE-2012-6116  
Description
modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2013-03-01  
Modified Date
2013-04-03  
Seq
2012-6116  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235694 47062 CVE-2012-6116 RHSA-2013:0547  View
235695 47062 CVE-2012-6116 RHSA-2013:0686  View
235696 47062 CVE-2012-6116 https://github.com/jsomara/katello/commit/65f1e42b7bda0f3410931c50598540d944d8bf0d  View
235697 47062 CVE-2012-6116 https://github.com/Katello/katello/commits/master/katello-configure/katello-configure.spec  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20135 JVNDB-2013-001710 Katello の katello-configure における Candlepin CA 証明書を改ざんされる脆弱性 Katello の katello-configure の modules/certs/manifests/config.pp は、Candlepin ブートストラップ RPM に対して脆弱なアクセス許可 (666) を用いるため、Candlepin CA 証明書を改ざんされる脆弱性が存在します。 CVE-2012-6116 59354 CVE-2012-6116 47062 2.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001710.html 2013-03-01 2013-04-05 View