Code injection

2018-06-0817:29:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confidential data.

CPENameOperatorVersion
crowbarle1.0

CPE	Name	Operator	Version
	crowbar	le	1.0

References

bugzilla.suse.com/show_bug.cgi?id=783195

www.suse.com/security/cve/CVE-2012-0433/