CVE-2008-2368

no score yetEPSS 0.2%

Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files.

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE: CWE-255
Published: 2009-01-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

redhat:certificate_system

References

http://secunia.com/advisories/33540
http://securitytracker.com/id?1021608
http://www.securityfocus.com/bid/33288
http://www.vupen.com/english/advisories/2009/0145
https://bugzilla.redhat.com/show_bug.cgi?id=452000

Check your stack JSON