description: In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable.
problem types: CWE-200
affected:
{
product: keylime
vendor: n/a
versions:
status: affected, version: keylime 6.3.0
}