Vulnerability in Varnish Cache Project

CVE-2013-0345

varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by reading the files. NOTE: some of these details are obtained from third party information.

EPSS: 0.004 (31.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References