low2.1
CVE-2013-0346
Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading…
Impact
Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor has stated "The tomcat log directory does not contain any sensitive information."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Tomcat | Versions 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5 |