CVE

Id
60293  
CVE No.
CVE-2013-0346  
Status
Candidate  
Description
** DISPUTED ** Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor has stated "The tomcat log directory does not contain any sensitive information."  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
608377 60293 CVE-2013-0346 MLIST:[oss-security] 20130222 Re: Cve request: tomcat world-readable logdir  View
608378 60293 CVE-2013-0346 URL:http://www.openwall.com/lists/oss-security/2013/02/23/5  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19794 JVNDB-2013-001369 Oracle Java SE の Java Runtime Environment における Deployment の処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) には、Deployment に関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2013-0351 60293 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001369.html  View