Lucene search
HistoryMay 08, 2014 - 2:29 p.m.
CVE-2013-0345
cve-2013-0345
varnish 3.0.3
sensitive information
world-readable permissions
nvd
security vulnerability
5.6 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by reading the files. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
varnish_cache_projectvarnish_cacheMatch3.0.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| varnish_cache_project:varnish_cache | varnish cache project varnish cache | eq | 3.0.3 |
Related
nvd
nvd
CVE-2013-0345
2014-05-08 14:29:08
debiancve
debiancve
CVE-2013-0345
2014-05-08 14:29:08
prion
prion
Information disclosure
2014-05-08 14:29:00
ubuntucve
ubuntucve
CVE-2013-0345
2014-05-08 00:00:00
cvelist
cvelist
CVE-2013-0345
2014-05-08 14:00:00
openvas
openvas
Fedora Update for varnish FEDORA-2013-24023
2014-05-12 00:00:00
Fedora Update for varnish FEDORA-2013-24023
2014-05-12 00:00:00
Fedora Update for varnish FEDORA-2013-24018
2014-05-12 00:00:00
nessus
nessus
Fedora 20 : varnish-3.0.5-1.fc20 (2013-24018)
2014-05-06 00:00:00
GLSA-201412-30 : Varnish: Multiple vulnerabilities
2014-12-16 00:00:00
Fedora 19 : varnish-3.0.5-1.fc19 (2013-24023)
2014-05-06 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: varnish-3.0.5-1.fc20
2014-05-06 03:41:15
[SECURITY] Fedora 19 Update: varnish-3.0.5-1.fc19
2014-05-06 03:30:29
gentoo
gentoo
Varnish: Multiple vulnerabilities
2014-12-15 00:00:00
amazon
amazon
Medium: varnish
2014-01-14 16:09:00
5.6 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2013-0345