REDHAT-BUG-1340525: Medium severity red hat dnf plugin subscription manager vulnerability
/var/lib/rhsm/cache/entitlementstatus.json and /var/lib/rhsm/facts/facts.json are world readable but contain sensitive information (Red Hat Contract number and hardware serial number, sufficient to authenticate again Red Hat and hardware vendor support) can could be used by an attacker to perform a social engineering attack.
Upstream patch:
https://github.com/candlepin/subscription-manager/commit/9dec31
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1340525?
The severity of REDHAT-BUG-1340525 is considered high due to the exposure of sensitive information.
How do I fix REDHAT-BUG-1340525?
To fix REDHAT-BUG-1340525, ensure that the files /var/lib/rhsm/cache/entitlement_status.json and /var/lib/rhsm/facts/facts.json are set to have restricted permissions.
Who is affected by REDHAT-BUG-1340525?
Users of Red Hat Subscription Manager are affected by REDHAT-BUG-1340525.
What kind of information is exposed in REDHAT-BUG-1340525?
REDHAT-BUG-1340525 exposes sensitive information such as Red Hat Contract numbers and hardware serial numbers.
What could an attacker do with the information in REDHAT-BUG-1340525?
An attacker could use the exposed information from REDHAT-BUG-1340525 to authenticate with Red Hat and the hardware vendor for malicious purposes.