Gentoo Linux Security Advisory GLSA 200812-09 – Smart cards formatted using OpenSC do not sufficiently protect the PIN, allowing attackers to reset it. Chaskiel M Grundman reported that OpenSC uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4. Versions less than 0.11.6 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/72834/glsa-200812-09.txt
Source: https://packetstormsecurity.com/files/72834/Gentoo-Linux-Security-Advisory-200812-9.html