CVE-2024-2905
Medium
Description
A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds having the world-readable bit enabled. This issue arises from the default permissions being set at a higher level than recommended, potentially exposing sensitive authentication data to unauthorized access.
SeverityMedium
CVSS6.2
Exploit probability—
Product
Rpm-ostree
PublishedApr 25, 2024
First seenApr 25, 2024
Weakness typeCWE-732CWE-732
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rpm-ostree | 1.2024.4 | — |
| Red Hat Red Hat Enterprise Linux 10 | No range specified | — |
| enterprise_linux 9 | No range specified | — |
| rhel_eus 9.2 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.