Linuxfoundation Free Range Routing vulnerabilities

1 known vulnerability affecting linuxfoundation/free_range_routing.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2020-12831MEDIUMCVSS 5.3≤ 7.3.12020-05-13

CVE-2020-12831 [MEDIUM] CWE-732 CVE-2020-12831: An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the spli An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the split-config feature, the init script creates an empty config file with world-readable default permissions, leading to a possible information leak via tools/frr.in and tools/frrcommon.sh.in. NOTE: some parties consider this user error, not a vulnerability