CVE-2008-2368

Vulnerability

Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files [2]. These files are created with weak permissions, making them readable by any local user on the system [2].

Exploitation

An attacker with local access to the system can read the debug log files to obtain plaintext passwords. No authentication or special privileges are required beyond the ability to read the files from the filesystem [2].

Impact

Successful exploitation leads to disclosure of plaintext passwords, which may be used to gain unauthorized access to the Certificate System or other services that share the same credentials [2].

Mitigation

No fix or workaround is disclosed in the available references. Red Hat has not published a patch or mitigation for this issue in the referenced sources.