VDB
CVE-2008-2367
CVE-2008-2367
PUBLISHED
Reported by redhat · Published January 20, 2009
Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| redhat | certificate_system | |
| n/a | n/a | * |
Timeline
- Jan 20, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 30, 2023 EPSS Score
References
- x_refsource_CONFIRM
- 33540 third-party-advisoryx_refsource_SECUNIA
- ADV-2009-0145 vdb-entryx_refsource_VUPEN
- 33288 vdb-entryx_refsource_BID
- 1021608 vdb-entryx_refsource_SECTRACK
- RHSA-2009:0006 vendor-advisoryx_refsource_REDHAT
- RHSA-2009:0007 vendor-advisoryx_refsource_REDHAT
- redhat-cs-configfile-info-disclosure(48021) vdb-entryx_refsource_XF