CVE-2016-4455

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-4455
The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.

3.3 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.1 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://rhn.redhat.com/errata/RHSA-2016-2592.html Third Party Advisory VDB Entry
http://rhn.redhat.com/errata/RHSA-2017-0698.html Third Party Advisory VDB Entry
http://www.openwall.com/lists/oss-security/2016/10/26/5 Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/93926 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038083 Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1340525 Issue Tracking Patch Third Party Advisory VDB Entry
https://github.com/candlepin/subscription-manager/blob/subscription-manager-1.17.7-1/subscription-manager.spec Third Party Advisory
https://github.com/candlepin/subscription-manager/commit/9dec31 Patch Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:redhat:subscription-manager:*:*:*:*:*:*:*:*
History

12 Feb 2023, 23:21

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/security/cve/CVE-2016-4455', 'name': 'https://access.redhat.com/security/cve/CVE-2016-4455', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2017:0698', 'name': 'https://access.redhat.com/errata/RHSA-2017:0698', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2016:2592', 'name': 'https://access.redhat.com/errata/RHSA-2016:2592', 'tags': [], 'refsource': 'MISC'}
Summary It was found that subscription-manager set weak permissions on files in /var/lib/rhsm/, causing an information disclosure. A local, unprivileged user could use this flaw to access sensitive data that could potentially be used in a social engineering attack. The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.

02 Feb 2023, 21:16

Type Values Removed Values Added
Summary The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories. It was found that subscription-manager set weak permissions on files in /var/lib/rhsm/, causing an information disclosure. A local, unprivileged user could use this flaw to access sensitive data that could potentially be used in a social engineering attack.
References
  • (MISC) https://access.redhat.com/security/cve/CVE-2016-4455 -
  • (MISC) https://access.redhat.com/errata/RHSA-2017:0698 -
  • (MISC) https://access.redhat.com/errata/RHSA-2016:2592 -
Information

Published : 2017-04-14 18:59

Updated : 2023-12-10 12:01

NVD link : CVE-2016-4455

Mitre link : CVE-2016-4455

CVE.ORG link : CVE-2016-4455

JSON object : View

Products Affected

redhat

  • enterprise_linux_hpc_node
  • enterprise_linux_workstation
  • subscription-manager
  • enterprise_linux_server
  • enterprise_linux_desktop
CWE
CWE-264

Permissions, Privileges, and Access Controls