CVE-2016-4455
Fixed in a distro release EPSS <1%
The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.
Products: redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_workstation, redhat subscription-manager
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 | python-rhsm | 0:1.18.6-1.el6 |
| Red Hat Enterprise Linux 6 | python-rhsm-certificates | 0:1.18.6-1.el6 |
| Red Hat Enterprise Linux 6 | python-rhsm-debuginfo | 0:1.18.6-1.el6 |
| Red Hat Enterprise Linux 6 | subscription-manager | 0:1.18.10-1.el6 |
| Red Hat Enterprise Linux 6 | subscription-manager-debuginfo | 0:1.18.10-1.el6 |
| Red Hat Enterprise Linux 6 | subscription-manager-firstboot | 0:1.18.10-1.el6 |
| Red Hat Enterprise Linux 6 | subscription-manager-gui | 0:1.18.10-1.el6 |
| Red Hat Enterprise Linux 6 | subscription-manager-migration | 0:1.18.10-1.el6 |
| Red Hat Enterprise Linux 6 | subscription-manager-migration-data | 0:2.0.34-1.el6 |
| Red Hat Enterprise Linux 6 | subscription-manager-plugin-container | 0:1.18.10-1.el6 |
| Red Hat Enterprise Linux 7 | python-rhsm | 0:1.17.9-1.el7 |
| Red Hat Enterprise Linux 7 | python-rhsm-certificates | 0:1.17.9-1.el7 |
| Red Hat Enterprise Linux 7 | python-rhsm-debuginfo | 0:1.17.9-1.el7 |
| Red Hat Enterprise Linux 7 | subscription-manager | 0:1.17.15-1.el7 |
| Red Hat Enterprise Linux 7 | subscription-manager-debuginfo | 0:1.17.15-1.el7 |
| Red Hat Enterprise Linux 7 | subscription-manager-gui | 0:1.17.15-1.el7 |
| Red Hat Enterprise Linux 7 | subscription-manager-initial-setup-addon | 0:1.17.15-1.el7 |
| Red Hat Enterprise Linux 7 | subscription-manager-migration | 0:1.17.15-1.el7 |
| Red Hat Enterprise Linux 7 | subscription-manager-migration-data | 0:2.0.31-1.el7 |
| Red Hat Enterprise Linux 7 | subscription-manager-plugin-container | 0:1.17.15-1.el7 |
| Red Hat Enterprise Linux 7 | subscription-manager-plugin-ostree | 0:1.17.15-1.el7 |