Vulnerability Details CVE-2013-0337
                The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.
                
                    Exploit prediction scoring system (EPSS) score
                    
                        
                            EPSS Score 0.005
                        
                    
                    
                        
                            EPSS Ranking 67.1%
                        
                    
                 
                
                    CVSS Severity
                    
                    
                        
                            CVSS v2 Score 7.5