PT-2014-2796

Name of the Vulnerable Software and Affected Versions Katello Installer versions prior to 0.0.18 Description The issue allows local users to obtain the private key by reading the file due to world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node...