Vulnerabilities > Redhat > Rhncfg

DATE CVE VULNERABILITY TITLE RISK
2012-10-22 CVE-2012-2679 Permissions, Privileges, and Access Controls vulnerability in Redhat Rhncfg 5.10.27
Red Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak permissions (world-readable) for /var/log/rhncfg-actions, which allows local users to obtain sensitive information about the rhncfg-client actions by reading the file.
local
low complexity
redhat CWE-264
2.1