PT-2014-2453 · Apache · Apache Tomcat

Agostino Sarubbo + 1 · CVE-2013-0346 · Publicado 2014-02-15 · Atualizado 2024-08-06

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 7.x

Description The issue allows local users to potentially obtain sensitive information by reading files due to world-readable permissions for the log directory and its files. However, one Tomcat distributor claims that the log directory does not contain sensitive information.

Recommendations For Apache Tomcat version 7.x, consider changing the permissions of the log directory and its files to prevent world-readable access, thereby minimizing the risk of sensitive information disclosure.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-0346

Produtos afetados

Apache Tomcat

Referências · 5

• http://openwall.com/lists/oss-security/2013/02/23/5 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0346 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-0346 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=924841 · Nota
• https://t.me/cvenotify/89443 · Publicação no Telegram