CVE-2015-5284: ipa: ipa-kra-install includes certificate and private key in world readable file

Severity: Critical

CVSS Score: 9.8

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.