Description
muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials.
References
- 29893 third-party-advisory
- mucommander-credentials-info-disclosure(41908) vdb-entry
- http://www.mucommander.com/changes.php
- 28875 vdb-entry