Unscored CVE-2014-3800 EUVD-2014-3739GHSA-253h-63vc-5w2v

XBMC 13.0 uses world-readable permissions for .xbmc/userdata/sources.xml, which allows local users to obtain user names and passwords by re…

Published Aug 7, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

XBMC 13.0 uses world-readable permissions for .xbmc/userdata/sources.xml, which allows local users to obtain user names and passwords by reading this file.

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747428
[oss-security] 20140520 CVE request: xbmc mailing-list
http://trac.xbmc.org/ticket/15198
[oss-security] 20140520 Re: CVE request: xbmc mailing-list