Local User Information Disclosure in muCommander by muCommander Team
CVE-2008-1970

Currently unrated

Key Information:

Vendor: Mucommander
Status: Mucommander
Vendor: CVE Published:; 27 April 2008

🔔 Create Mucommander Vulnerability Alert

What is CVE-2008-1970?

In muCommander versions prior to 0.8.2, sensitive information is stored in a file named credentials.xml with inadequate file permissions. This oversight allows local users to access and potentially exploit sensitive credentials stored within that file, leading to unauthorized disclosure of sensitive information. Users are advised to upgrade to the latest version to mitigate this risk.

References

http://secunia.com/advisories/29893

third-party-advisoryx_refsource_SECUNIA

https://exchange.xforce.ibmcloud.com/vulnerabilities/41908

vdb-entryx_refsource_XF

http://www.mucommander.com/changes.php

x_refsource_CONFIRM

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 27, 2008
Vulnerability Reserved
Apr 27, 2008

CVE-2008-1970 Data

JSON