VDB
CVE-2008-2368
CVE-2008-2368
PUBLISHED
Reported by redhat · Published January 20, 2009
Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a, n/a |
Timeline
- Jan 20, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 26, 2023 EPSS Score
References
- 33540 third-party-advisoryx_refsource_SECUNIA
- ADV-2009-0145 vdb-entryx_refsource_VUPEN
- 33288 vdb-entryx_refsource_BID
- 1021608 vdb-entryx_refsource_SECTRACK
- RHSA-2009:0006 vendor-advisoryx_refsource_REDHAT
- x_refsource_CONFIRM
- RHSA-2009:0007 vendor-advisoryx_refsource_REDHAT
- redhat-cs-debuglog-info-disclosure(48022) vdb-entryx_refsource_XF