CVE-2014-3851

The CVE-2014-3851 entry concerns Pyplate 0.08, where passwd.db is stored with world-readable permissions. This allows local users to read the administrator password from the file, revealing a risk to confidentiality via improper file permissions in usr/lib/cgi-bin/create_passwd_file.py. The avail...