CVE-2016-4455

Published April 14th, 2017

View on NVD ↗

CVSS v3

3.3

LOW

CVSS v2

2.1

LOW

Affected

PROJECT

Description

The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.

candlepin/subscription-manager

A CLI client for Candlepin

GitHub