Apache Tomcat Permissions Privileges and Access Controls Vulnerability - CVE-2013-0346 - Vulnerability Database

Apache Tomcat Permissions Privileges and Access Controls Vulnerability - CVE-2013-0346

Low

Reference: CVE-2013-0346

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-0346

Title: Apache Tomcat Permissions Privileges and Access Controls Vulnerability

Overview:

DISPUTED Apache Tomcat 7.x uses world-readable permissions for the log directory and its files which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor has stated quotThe tomcat log directory does not contain any sensitive information.quot