Skip to content
Sign in Sign up
JA EN FR
SecPulse
Unrated

WTF before 0.19.0 does not set the permissions of config.yml, which might make it easier for local attackers to read passwords or API keys if the perm...

CVE-2019-15716 First seen on SecPulse
Original description The description as published by the source.

WTF before 0.19.0 does not set the permissions of config.yml, which might make it easier for local attackers to read passwords or API keys if the permissions were misconfigured or were based on unsafe OS defaults.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details