CVE

Id
71096  
CVE No.
CVE-2014-3800  
Status
Candidate  
Description
XBMC 13.0 uses world-readable permissions for .xbmc/userdata/sources.xml, which allows local users to obtain user names and passwords by reading this file.  
Phase
Assigned (20140520)  
Votes
None (candidate not yet proposed)  
Comments