CVE-2013-7458

Description

linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.

Risk Information

Base Score

3.3

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.024

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in Redis 3.2.2	Windows
Multiple vulnerabilities affected in Redis 3.2.2 (For Linux)	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234