authd sets weak permissions for /etc/ident.key, which allows local users to obtain the key by leveraging a race condition between the creation of the key, and the chmod to protect it.
References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1346051 Issue Tracking Third Party Advisory
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: redhat

Published: 2017-07-14T20:00:00

Updated: 2017-07-14T18:57:01

Reserved: 2016-05-24T00:00:00


Link: CVE-2016-4982

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2017-07-17T13:18:06.093

Modified: 2017-08-09T15:10:26.487


Link: CVE-2016-4982

JSON object: View

cve-icon Redhat Information

No data.

CWE