Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22198
HistoryDec 19, 2019 - 3:36 a.m.

Insecure File Permissions

2019-12-1903:36:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2

0.0004 Low

EPSS

Percentile

12.6%

github.com/openshift/installer uses insecure file permissions. The kubeconfig and kubeadmin-password files are created with world readable file missions during default installation, potentially allowing a local user to retrieve confidential information such as usernames and passwords.

0.0004 Low

EPSS

Percentile

12.6%