REDHAT-BUG-452000: Medium severity red hat certificate system vulnerability
It was discovered that Red Hat Certificate System may store plain text passwords in multiple debug log files (such as UserDirEnrollment password or RA wizard installer log).
This problem allows any local user to extract plain text passwords from the Red Hat Certificate System debug log files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-452000?
REDHAT-BUG-452000 is considered a medium severity vulnerability due to the exposure of plain text passwords in debug log files.
How do I fix REDHAT-BUG-452000?
To fix REDHAT-BUG-452000, ensure that debug logging does not capture sensitive password data or restrict access to the logs.
Who is affected by REDHAT-BUG-452000?
Any local user with access to the Red Hat Certificate System can potentially exploit REDHAT-BUG-452000.
What versions of Red Hat Certificate System are affected by REDHAT-BUG-452000?
REDHAT-BUG-452000 affects all versions of Red Hat Certificate System that store passwords in plain text in debug logs.
What are the potential risks of REDHAT-BUG-452000?
The potential risks of REDHAT-BUG-452000 include unauthorized access to sensitive information and compromised security for users of the certificate system.