Vulnerability in Xbmc

CVE-2014-3800

XBMC 13.0 uses world-readable permissions for .xbmc/userdata/sources.xml, which allows local users to obtain user names and passwords by reading this file.

EPSS: 0.004 (29.6th percentile) — read the EPSS interpretation.

Affected products

  • Xbmc — versions 13.0
  • N/a — versions n/a

Weakness classification (CWE)

References