CVE-2012-5561

Published: Mar 1, 2013
Updated: Apr 13, 2023
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2012-5561" target="_blank" rel="noopener"> CVE-2012-5561
Severity: Low
Exploit:

script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file.