V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
← Back to List
Katello›Applicationnvd

Katello-configure

Vulnerabilities
1
Known exploited
0
Max CVSS
4.6
Top EPSS
0.00229

Severity breakdown

Critical
0
High
0
Medium
1
Low
0

Affected version ranges

≤ 1.3.2_pulpv2
Also matched as (raw): katello-configure,katello

Top vulnerabilities

CVE-2012-6116modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.
View vendor →Open in catalog with product filter →