What’s Vulnerable › Vulnerabilities

CVE-2013-4455

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-05-14 · updated 2026-06-16
• Weakness: CWE-264

Description

Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by reading the file.

Affected products

• Katello Installer: through 0.0.17; 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6 (+10)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1021784
• https://github.com/Katello/katello-installer/commit/15e01086bcb3f5d42525730e8b162bca11bec85e
• https://bugzilla.redhat.com/show_bug.cgi?id=1021784
• https://github.com/Katello/katello-installer/commit/15e01086bcb3f5d42525730e8b162bca11bec85e

Get alerted when CVE-2013-4455 or the next vulnerability affects your stack