Vulnerability in Pnp4nagios

CVE-2012-3457

PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which allows local users to obtain the Gearman shared secret by reading the file.

EPSS: 0.003 (26.7th percentile) — read the EPSS interpretation.

Affected products

  • Pnp4nagios — versions 0.6.0, 0.6.1, 0.6.2
  • N/a — versions n/a

Weakness classification (CWE)

References