Vulnerability in Scientificlinux Luci

CVE-2013-4481

Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets."

Vulnerability class: Race Condition

EPSS: 0.002 (16.2th percentile) — read the EPSS interpretation.