cve/2013/CVE-2013-7458.md

CVE-2013-7458

Description

linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.

POC

Reference

• https://github.com/antirez/linenoise/issues/121
• https://github.com/antirez/redis/blob/3.2/00-RELEASENOTES
• https://github.com/antirez/redis/pull/3322

Github

• https://github.com/lukeber4/usn-search