Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Redis linenoise 信息泄露漏洞
Vulnerability Description
Redis Labs Redis是美国Redis Labs公司的一套开源的使用ANSI C编写、支持网络、可基于内存亦可持久化的日志型、键值（Key-Value）存储数据库，并提供多种语言的API。 Redis 3.2.3之前版本中使用的linenoise库中存在信息泄露漏洞，该漏洞源于‘.rediscli_history’文件使用全局可读权限。本地攻击者可通过读取该文件利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A