| Package | Affected versions | Patched versions |
|---|---|---|
| directory server | = 8.0= 8.1 |
The (1) setup-ds.pl and (2) setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free