CVE-2012-5561: Exposure of Sensitive Information to an Unauthorized Actor

script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file...