kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords.
CVSS Score
4.6
EPSS Score
0.001
Published
2006-05-18