linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: debian
Published: 2016-08-10T14:00:00
Updated: 2024-08-06T18:09:16.915Z
Reserved: 2016-07-28T00:00:00
Link: CVE-2013-7458
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2016-08-10T14:59:00.143
Modified: 2018-08-08T13:49:17.230
Link: CVE-2013-7458
Redhat