Vulnerability Details CVE-2013-4481
Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 7.8%
CVSS Severity
CVSS v2 Score 1.9
References
Products affected by CVE-2013-4481
-
cpe:2.3:a:scientificlinux:luci:0.26.0
-
cpe:2.3:o:redhat:enterprise_linux:6.0