Description

Red Hat has acknowledged some security issues in Red Hat Certificate Server, which can be exploited by malicious, local users to disclose potentially sensitive information.

1) A security issue is caused due to insecure default access permissions on certain configuration files (e.g. password.conf), which can be exploited to disclose potentially sensitive information.

2) A security issue is caused due to the Red Hat Certificate System storing passwords in plaintext in various debug log files with insecure permissions, which can be exploited to disclose passwords.

Solution
Updated packages are available via Red Hat Network.
Further details available in Customer Area

Original Advisory
RHSA-2009-0006:
https://rhn.redhat.com/errata/RHSA-2009-0006.html

Deep Links
Links available in Customer Area