linenoise, as used in Redis prior to 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
redislabs redis |
||
debian debian linux 8.0 |