Description

** DISPUTED ** Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor has stated "The tomcat log directory does not contain any sensitive information."

Remediation

References

CVE-2013-0346

Related Vulnerabilities

PleskWin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11584)

WordPress Plugin WP eCommerce Multiple Unspecified Vulnerabilities (3.9.3)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress SQL Injection (3.6.3)

WordPress Plugin Simple Membership Cross-Site Scripting (3.5.6)

WordPress Plugin Business Directory-Easy Listing Directories for WordPress Multiple Vulnerabilities (5.11.1)

Severity

Low

Classification

CVE-2013-0346 CWE-264

Tags

Missing Update Known Vulnerabilities