Description

varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by reading the files. NOTE: some of these details are obtained from third party information.

Remediation

References

CVE-2013-0345

Related Vulnerabilities

WordPress Plugin Duplicate Page Cross-Site Scripting (4.4.2)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.51)

WordPress Plugin LetsRecover-WooCommerce Abandoned Cart Notifications Multiple SQL Injection Vulnerabilities (1.1.0)

IBM WebSEAL Use of Hard-coded Credentials Vulnerability (CVE-2018-1887)

WordPress Plugin Multiple Page Generator-MPG Cross-Site Request Forgery (3.3.9)

Severity

Low

Classification

CVE-2013-0345 CWE-264

Tags

Missing Update Known Vulnerabilities