Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-0346
2.1
LOWCVSS v2
Published
February 15, 2014
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor has stated "The tomcat log directory does not contain any sensitive information."
apache/tomcat
GitHubApache Tomcat
GitHubApache Tomcat= 7.0.2, = 7.0.49, = 7.0.12, = 7.0.20, = 7.0.34, = 7.0.8, = 7.0.1, = 7.0.5, = 7.0.18, = 7.0.11, = 7.0.26, = 7.0.28, = 7.0.4, = 7.0.42, = 7.0.0, = 7.0.14, = 7.0.23, = 7.0.6, = 7.0.48, = 7.0.22, = 7.0.39, = 7.0.44, = 7.0.46, = 7.0.50, = 7.0.7, = 7.0.19, = 7.0.32, = 7.0.33, = 7.0.10, = 7.0.13, = 7.0.25, = 7.0.27, = 7.0.40, = 7.0.41, = 7.0.9, = 7.0.16, = 7.0.21, = 7.0.3, = 7.0.31, = 7.0.36, = 7.0.38, = 7.0.43, = 7.0.45, = 7.0.35, = 7.0.47, = 7.0.15, = 7.0.17, = 7.0.24, = 7.0.29, = 7.0.30, = 7.0.37NVD