Authorization Bypass

2020-04-1000:44:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

rhn-client-tools is vulnerable to authorization bypass. The vulnerability exists as it was discovered that rhn-client-tools set insecure permissions on the loginAuth.pkl file, used to store session credentials for authenticating connections to Red Hat Network servers. A local, unprivileged user could use these credentials to download packages from the Red Hat Network. They could also manipulate package or action lists associated with the system’s profile.

CPENameOperatorVersion
rhn-client-toolseq0.4.16__2.el5_1.9
rhn-client-toolseq0.4.19__4.el5
rhn-client-toolseq0.4.19__17.el5
rhn-client-toolseq0.4.17__8.el5
rhn-client-toolseq0.4.13__1.el5
rhn-client-toolseq0.4.20__9.el5
rhn-client-toolseq0.4.16__1.el5
rhn-client-toolseq0.4.19__9.el5
rhn-client-toolseq0.4.16__2.el5_1.9
rhn-client-toolseq0.4.19__4.el5

Name	Operator	Version
rhn-client-tools	eq	0.4.16__2.el5_1.9
rhn-client-tools	eq	0.4.19__4.el5
rhn-client-tools	eq	0.4.19__17.el5
rhn-client-tools	eq	0.4.17__8.el5
rhn-client-tools	eq	0.4.13__1.el5
rhn-client-tools	eq	0.4.20__9.el5
rhn-client-tools	eq	0.4.16__1.el5
rhn-client-tools	eq	0.4.19__9.el5
rhn-client-tools	eq	0.4.16__2.el5_1.9
rhn-client-tools	eq	0.4.19__4.el5