VULNERABILITY INTELLIGENCE

CVE-2008-2367

CVSS score2.1 LOW
EPSS probability0.24%
CISA KEVNot currently listed
Published2009-01-20
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files.

Primary references