CVE-2008-2367: Red Hat Certificate System

Low severity, CVSS 2.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files.

Affected products

• Red Hat Certificate System: version 7.2 only

Published 2009-01-20. Last modified 2026-06-16.