World-readable CA Private Key in IBM Cloud Private 2.1.0

World-readable CA Private Key in IBM Cloud Private 2.1.0

CVE-2018-1841 · LOW Severity

AV:L/AC:L/AU:N/C:P/I:N/A:N

IBM Cloud Private 2.1.0 could allow a local user to obtain the CA Private Key due to it being world readable in boot/master node. IBM X-Force ID: 150901.

Learn more about our Cloud Audit.