CVE-2012-6116 - CVE House
Back to Database
Status published Low CVE-2012-6116

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions...

Vulnerability Description

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-6116

Credits & Attribution

No credits recorded in the NVD database.

References

More from katello

View All →
CVE-2016-3072
Multiple SQL injection vulnerabilities in the scoped_search function in app/controllers/katello/api/v2/api_controller.rb...
High 8.8
CVE-2014-3712
Katello allows remote attackers to cause a denial of service...
Medium 5
CVE-2013-4455
Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when...
Low 2.1
CVE-2013-4201
Katello allows remote authenticated users to call the "system remove_deletion"...
Medium 4.3
CVE-2012-5561
script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which...
Low 2.1

Affected Vendor

Affected Software

katello, katello-configure
Vulnerable Versions:
0

Timeline

Official Publish: March 1st, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.