Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2013-0346

Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor has stated "The tomcat log directory does not contain any sensitive information."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.5%
CVSS Severity
CVSS v2 Score 2.1
Products affected by CVE-2013-0346
  • Apache » Tomcat » Version: 7.0.0
    cpe:2.3:a:apache:tomcat:7.0.0
  • Apache » Tomcat » Version: 7.0.1
    cpe:2.3:a:apache:tomcat:7.0.1
  • Apache » Tomcat » Version: 7.0.10
    cpe:2.3:a:apache:tomcat:7.0.10
  • Apache » Tomcat » Version: 7.0.11
    cpe:2.3:a:apache:tomcat:7.0.11
  • Apache » Tomcat » Version: 7.0.12
    cpe:2.3:a:apache:tomcat:7.0.12
  • Apache » Tomcat » Version: 7.0.13
    cpe:2.3:a:apache:tomcat:7.0.13
  • Apache » Tomcat » Version: 7.0.14
    cpe:2.3:a:apache:tomcat:7.0.14
  • Apache » Tomcat » Version: 7.0.15
    cpe:2.3:a:apache:tomcat:7.0.15
  • Apache » Tomcat » Version: 7.0.16
    cpe:2.3:a:apache:tomcat:7.0.16
  • Apache » Tomcat » Version: 7.0.17
    cpe:2.3:a:apache:tomcat:7.0.17
  • Apache » Tomcat » Version: 7.0.18
    cpe:2.3:a:apache:tomcat:7.0.18
  • Apache » Tomcat » Version: 7.0.19
    cpe:2.3:a:apache:tomcat:7.0.19
  • Apache » Tomcat » Version: 7.0.2
    cpe:2.3:a:apache:tomcat:7.0.2
  • Apache » Tomcat » Version: 7.0.20
    cpe:2.3:a:apache:tomcat:7.0.20
  • Apache » Tomcat » Version: 7.0.21
    cpe:2.3:a:apache:tomcat:7.0.21
  • Apache » Tomcat » Version: 7.0.22
    cpe:2.3:a:apache:tomcat:7.0.22
  • Apache » Tomcat » Version: 7.0.23
    cpe:2.3:a:apache:tomcat:7.0.23
  • Apache » Tomcat » Version: 7.0.24
    cpe:2.3:a:apache:tomcat:7.0.24
  • Apache » Tomcat » Version: 7.0.25
    cpe:2.3:a:apache:tomcat:7.0.25
  • Apache » Tomcat » Version: 7.0.26
    cpe:2.3:a:apache:tomcat:7.0.26
  • Apache » Tomcat » Version: 7.0.27
    cpe:2.3:a:apache:tomcat:7.0.27
  • Apache » Tomcat » Version: 7.0.28
    cpe:2.3:a:apache:tomcat:7.0.28
  • Apache » Tomcat » Version: 7.0.29
    cpe:2.3:a:apache:tomcat:7.0.29
  • Apache » Tomcat » Version: 7.0.3
    cpe:2.3:a:apache:tomcat:7.0.3
  • Apache » Tomcat » Version: 7.0.30
    cpe:2.3:a:apache:tomcat:7.0.30
  • Apache » Tomcat » Version: 7.0.31
    cpe:2.3:a:apache:tomcat:7.0.31
  • Apache » Tomcat » Version: 7.0.32
    cpe:2.3:a:apache:tomcat:7.0.32
  • Apache » Tomcat » Version: 7.0.33
    cpe:2.3:a:apache:tomcat:7.0.33
  • Apache » Tomcat » Version: 7.0.34
    cpe:2.3:a:apache:tomcat:7.0.34
  • Apache » Tomcat » Version: 7.0.35
    cpe:2.3:a:apache:tomcat:7.0.35
  • Apache » Tomcat » Version: 7.0.36
    cpe:2.3:a:apache:tomcat:7.0.36
  • Apache » Tomcat » Version: 7.0.37
    cpe:2.3:a:apache:tomcat:7.0.37
  • Apache » Tomcat » Version: 7.0.38
    cpe:2.3:a:apache:tomcat:7.0.38
  • Apache » Tomcat » Version: 7.0.39
    cpe:2.3:a:apache:tomcat:7.0.39
  • Apache » Tomcat » Version: 7.0.4
    cpe:2.3:a:apache:tomcat:7.0.4
  • Apache » Tomcat » Version: 7.0.40
    cpe:2.3:a:apache:tomcat:7.0.40
  • Apache » Tomcat » Version: 7.0.41
    cpe:2.3:a:apache:tomcat:7.0.41
  • Apache » Tomcat » Version: 7.0.42
    cpe:2.3:a:apache:tomcat:7.0.42
  • Apache » Tomcat » Version: 7.0.43
    cpe:2.3:a:apache:tomcat:7.0.43
  • Apache » Tomcat » Version: 7.0.44
    cpe:2.3:a:apache:tomcat:7.0.44
  • Apache » Tomcat » Version: 7.0.45
    cpe:2.3:a:apache:tomcat:7.0.45
  • Apache » Tomcat » Version: 7.0.46
    cpe:2.3:a:apache:tomcat:7.0.46
  • Apache » Tomcat » Version: 7.0.47
    cpe:2.3:a:apache:tomcat:7.0.47
  • Apache » Tomcat » Version: 7.0.48
    cpe:2.3:a:apache:tomcat:7.0.48
  • Apache » Tomcat » Version: 7.0.49
    cpe:2.3:a:apache:tomcat:7.0.49
  • Apache » Tomcat » Version: 7.0.5
    cpe:2.3:a:apache:tomcat:7.0.5
  • Apache » Tomcat » Version: 7.0.50
    cpe:2.3:a:apache:tomcat:7.0.50
  • Apache » Tomcat » Version: 7.0.6
    cpe:2.3:a:apache:tomcat:7.0.6
  • Apache » Tomcat » Version: 7.0.7
    cpe:2.3:a:apache:tomcat:7.0.7
  • Apache » Tomcat » Version: 7.0.8
    cpe:2.3:a:apache:tomcat:7.0.8
  • Apache » Tomcat » Version: 7.0.9
    cpe:2.3:a:apache:tomcat:7.0.9


Contact Us

Shodan ® - All rights reserved