Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Froxlor through 0.10.15. The installer wrote configuration parameters including passwords into files in /tmp, setting proper permissions only after writing the sensitive data. A local attacker could have disclosed the information if he read the file at the right time, because of _createUserdataConf in install/lib/class.FroxlorInstall.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Froxlor 信息泄露漏洞
Vulnerability Description
Froxlor是Froxlor团队的一套轻量级服务器管理软件。 Froxlor 0.10.15及之前版本中存在安全漏洞，该漏洞源于安装程序将配置参数（包括密码）写入到/tmp下的文件中，而且仅在写入敏感数据后才设置合适的权限。本地攻击可利用该漏洞获取信息。
CVSS Information
N/A
Vulnerability Type
N/A