CVE-2012-5561 - CVE House
Back to Database
Status published Low CVE-2012-5561

script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which...

Vulnerability Description

script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-5561

Credits & Attribution

No credits recorded in the NVD database.

References

More from katello

View All →
CVE-2016-3072
Multiple SQL injection vulnerabilities in the scoped_search function in app/controllers/katello/api/v2/api_controller.rb...
High 8.8
CVE-2014-3712
Katello allows remote attackers to cause a denial of service...
Medium 5
CVE-2013-4455
Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when...
Low 2.1
CVE-2013-4201
Katello allows remote authenticated users to call the "system remove_deletion"...
Medium 4.3
CVE-2012-6116
modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions...
Low 2.1

Affected Vendor

Affected Software

katello
Vulnerable Versions:
1.1

Timeline

Official Publish: March 1st, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.