Vulnerability in Knowledgetree
CVE-2006-2443
The Debian package of knowledgetree 2.0.7 creates environment.php with world-readable permissions, which allows local users to obtain sensitive information such as the username and password for the KnowledgeTree database.
EPSS: 0.003 (25.6th percentile) — read the EPSS interpretation.
Affected products
- Knowledgetree — versions 2.0.7
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Patch)