Skip to content
OpenAdvisories
Unscored CVE-2016-4982 EUVD-2016-5950GHSA-637c-5c76-f4m8

authd sets weak permissions for /etc/ident.key, which allows local users to obtain the key by leveraging a race condition between the creat…

Published Jul 14, 2017 · Updated Aug 6, 2024 · Assigned by redhat

Description

authd sets weak permissions for /etc/ident.key, which allows local users to obtain the key by leveraging a race condition between the creation of the key, and the chmod to protect it.

References