| Package | Affected versions | Patched versions |
|---|---|---|
| katello | = 1.1 |
script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free