Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22177
HistoryDec 16, 2019 - 7:00 a.m.

Insecure File Permissions

2019-12-1607:00:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

EPSS

0

Percentile

12.6%

hammer_cli uses insecure file permissions. The file /etc/hammer/cli.modules.d/foreman.yml is world-readable, which would allow a local user to access and read the file. The configuration file may contain confidential information such as usernames and passwords.

EPSS

0

Percentile

12.6%

Related for VERACODE:22177