CVE-2016-4455: Low severity red hat enterprise linux desktop vulnerability
/var/lib/rhsm/cache/entitlementstatus.json and /var/lib/rhsm/facts/facts.json are world readable but contain sensitive information (Red Hat Contract number and hardware serial number, sufficient to authenticate again Red Hat and hardware vendor support) can could be used by an attacker to perform a social engineering attack.
Upstream patch:
https://github.com/candlepin/subscription-manager/commit/9dec31
Other sources
The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4455?
CVE-2016-4455 is classified as a moderate severity vulnerability.
How do I fix CVE-2016-4455?
To fix CVE-2016-4455, ensure that the permissions on /var/lib/rhsm/cache/entitlement_status.json and /var/lib/rhsm/facts/facts.json are properly restricted.
What type of information is exposed in CVE-2016-4455?
CVE-2016-4455 exposes sensitive information such as the Red Hat Contract number and hardware serial number.
Which versions of Red Hat are affected by CVE-2016-4455?
CVE-2016-4455 affects Red Hat Enterprise Linux versions 6.0 and 7.0, along with Red Hat Subscription Manager up to version 1.17.6-1.
Can CVE-2016-4455 be exploited by attackers?
Yes, an attacker could exploit CVE-2016-4455 to access sensitive information that may assist in unauthorized authentication.