CVE-2012-5561: Katello

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file.

Affected products

• Katello Katello: version 1.1 only

Published 2013-03-01. Last modified 2026-06-16.