2226 matches found
CVE-2012-0843
CVE-2012-0843 affects the uzbl browser, where information disclosure arises from a world-readable cookies storage file. Root cause is exposure of cookies data stored in a world-readable file, enabling partial confidentiality impact (C: HIGH in CVSS3.1) with local, low-complexity access and no aut...
CVE-2012-0843
Removed by vendor...
CVE-2012-0843: Exposure of Sensitive Information to an Unauthorized Actor
uzbl: Information disclosure via world-readable cookies storage file...
CVE-2011-2916
qtnx 0.9 stores non-custom SSH keys in a world-readable configuration file. If a user has a world-readable or world-executable home directory, another local system user could obtain the private key used to connect to remote NX sessions...
CVE-2011-2916
qtnx 0.9 stores non-custom SSH keys in a world-readable configuration file. If a user has a world-readable or world-executable home directory, another local system user could obtain the private key used to connect to remote NX sessions...
CVE-2011-2916
qtnx 0.9 stores non-custom SSH keys in a world-readable configuration file. If a user has a world-readable or world-executable home directory, another local system user could obtain the private key used to connect to remote NX sessions...
PT-2019-6655
Name of the Vulnerable Software and Affected Versions qtnx version 0.9 Description The issue concerns the storage of non-custom SSH keys in a world-readable configuration file by qtnx. This could allow another local system user to obtain the private key used for remote NX sessions if a user's hom...
CVE-2019-3866
An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw to access sensitive user information...
PT-2019-5309 · Openstack +1 · Openstack-Mistral +1
Name of the Vulnerable Software and Affected Versions: openstack-mistral affected versions not specified Description: An information-exposure issue was found in openstack-mistral where undercloud log files containing clear-text information were made world readable. This could allow a malicious...
CVE-2019-3866: Incorrect Permission Assignment for Critical Resource
An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit this flaw to access sensitive user information...
CVE-2013-1771
The web server Monkeyd produces a world-readable log /var/log/monkeyd/master.log on gentoo...
CVE-2013-1771
The web server Monkeyd produces a world-readable log /var/log/monkeyd/master.log on gentoo...
CVE-2013-1771
The web server Monkeyd produces a world-readable log /var/log/monkeyd/master.log on gentoo...
CVE-2010-2450
The keygen.sh script in Shibboleth SP 2.0 located in /usr/local/etc/shibboleth by default uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask default 22 instead of chmoding the resulting file itself, so the generated private key is world readable by...
CVE-2010-2450
The keygen.sh script in Shibboleth SP 2.0 located in /usr/local/etc/shibboleth by default uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask default 22 instead of chmoding the resulting file itself, so the generated private key is world readable by...
CVE-2010-2450
The keygen.sh script in Shibboleth SP 2.0 located in /usr/local/etc/shibboleth by default uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask default 22 instead of chmoding the resulting file itself, so the generated private key is world readable by...
CVE-2010-2450
The keygen.sh script in Shibboleth SP 2.0 located in /usr/local/etc/shibboleth by default uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask default 22 instead of chmoding the resulting file itself, so the generated private key is world readable by...
CVE-2010-2450
CVE-2010-2450 affects Shibboleth SP 2.0. The keygen.sh utility (in /usr/local/etc/shibboleth by default) uses OpenSSL to generate a DES private key and saves it to sp-key.pm with the process’s root umask (default 022). This results in the private key file being world-readable by default, exposing...
PT-2019-6852
Name of the Vulnerable Software and Affected Versions Monkeyd affected versions not specified Description The issue concerns the web server Monkeyd, which produces a world-readable log file located at /var/log/monkeyd/master.log on Gentoo systems. Recommendations At the moment, there is no...