CVE-2024-2905 — Rpm-ostree: world-readable /etc/shadow file
A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds having the world-readable bit enabled. This issue arises fro…
Published: 2024-04-25 · CVSS: 6.2 · CVSS 3.1
A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds having the world-readable bit enabled. This issue arises from the default permissions being set at a higher level than recommended, potentially exposing sensitive authentication data to unauthorized access.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7