VulnerabilityModified
CVE-2008-2368
Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by…
LOW 2.1EPSS 0.24%
Does this matter?
Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.
Description
Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 0.24% probability · 16th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-255
- Affected
- redhat/certificate system
- Source
- secalert@redhat.com
References
- http://secunia.com/advisories/33540Vendor Advisory
- http://securitytracker.com/id?1021608
- http://www.securityfocus.com/bid/33288
- http://www.vupen.com/english/advisories/2009/0145
- https://bugzilla.redhat.com/show_bug.cgi?id=452000
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48022
- https://rhn.redhat.com/errata/RHSA-2009-0006.htmlVendor Advisory
- https://rhn.redhat.com/errata/RHSA-2009-0007.html
- http://secunia.com/advisories/33540Vendor Advisory
- http://securitytracker.com/id?1021608
- http://www.securityfocus.com/bid/33288
- http://www.vupen.com/english/advisories/2009/0145
- https://bugzilla.redhat.com/show_bug.cgi?id=452000
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48022
- https://rhn.redhat.com/errata/RHSA-2009-0006.htmlVendor Advisory
- https://rhn.redhat.com/errata/RHSA-2009-0007.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.