| Package | Affected versions | Patched versions |
|---|---|---|
| katello-configure | ≤ 1.3.2_pulpv2 |
modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free