Lucene search

K
prionPRIOn knowledge basePRION:CVE-2010-1439
HistoryJun 07, 2010 - 5:12 p.m.

Authentication flaw

2010-06-0717:12:00
PRIOn knowledge base
www.prio-n.com
1

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

yum-rhn-plugin in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Enterprise Linux (RHEL) 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security updates, by leveraging authentication data from this file.

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%