description: A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable access permissions. This flaw allows a local attacker to have read access to potentially sensitive data. The highest threat from this vulnerability is to confidentiality.
problem types: CWE-276 - Incorrect Default Permissions
affected:
{
product: coreos-installer
vendor: n/a
versions:
status: affected, version: Fixed in coreos-installer 0.10.0
}