VYPR

katello-configure

by Red Hat

CVEs (1)

  • CVE-2012-6116Mar 1, 2013
    risk 0.00cvss epss 0.00

    modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.