CVE-2013-0345 — Cache Project Varnish Cache vulnerability
Severity
2.1LOWNVD
EPSS
0.0%
top 85.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 8
Latest updateMay 5
Description
varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by reading the files. NOTE: some of these details are obtained from third party information.
CVSS vector
AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9
Affected Packages1 packages
🔴Vulnerability Details
2📋Vendor Advisories
1Debian▶
CVE-2013-0345: varnish - varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ director...↗2013