Lucene search
Ubuntu.comUB:CVE-2013-0346HistoryFeb 15, 2014 - 12:00 a.m.
CVE-2013-0346
2014-02-1500:00:00
ubuntu.com
ubuntu.com
8
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.1%
DISPUTED Apache Tomcat 7.x uses world-readable permissions for the
log directory and its files, which might allow local users to obtain
sensitive information by reading a file. NOTE: One Tomcat distributor has
stated “The tomcat log directory does not contain any sensitive
information.”
Notes
| Author | Note |
|---|---|
| jdstrand | /var/log/tomcat5.5 is 750 on Ubuntu 8.04 LTS /var/log/tomcat6 is 750 on Ubuntu 10.04 LTS10 and higher /var/log/tomcat7 is 750 on Ubuntu 11.10 and higher |
Related
cve
cve
CVE-2013-0346
2014-02-15 14:57:07
nessus
nessus
prion
prion
Information disclosure
2014-02-15 14:57:00
nvd
nvd
CVE-2013-0346
2014-02-15 14:57:07
cvelist
cvelist
CVE-2013-0346
2014-02-15 00:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.1%
Related for UB:CVE-2013-0346