CVE-2013-0337

Published: Oct 27, 2013Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.

Affected (51)

Products: F5: Nginx

1 product

Nginx

Configuration A

51 vulnerable

Vulnerable Software	Affected Versions
F5 Nginx	Up to 1.3.13
F5 Nginx	Version 1.0.0
F5 Nginx	Version 1.0.10
F5 Nginx	Version 1.0.11
F5 Nginx	Version 1.0.12
F5 Nginx	Version 1.0.13
F5 Nginx	Version 1.0.14
F5 Nginx	Version 1.0.15
F5 Nginx	Version 1.0.1
F5 Nginx	Version 1.0.2
F5 Nginx	Version 1.0.3
F5 Nginx	Version 1.0.4
F5 Nginx	Version 1.0.5
F5 Nginx	Version 1.0.6
F5 Nginx	Version 1.0.7
F5 Nginx	Version 1.0.8
F5 Nginx	Version 1.0.9
F5 Nginx	Version 1.1.0
F5 Nginx	Version 1.1.10
F5 Nginx	Version 1.1.11
F5 Nginx	Version 1.1.12
F5 Nginx	Version 1.1.13
F5 Nginx	Version 1.1.14
F5 Nginx	Version 1.1.15
F5 Nginx	Version 1.1.16
F5 Nginx	Version 1.1.17
F5 Nginx	Version 1.1.18
F5 Nginx	Version 1.1.19
F5 Nginx	Version 1.1.1
F5 Nginx	Version 1.1.2
F5 Nginx	Version 1.1.3
F5 Nginx	Version 1.1.4
F5 Nginx	Version 1.1.5
F5 Nginx	Version 1.1.6
F5 Nginx	Version 1.1.7
F5 Nginx	Version 1.1.8
F5 Nginx	Version 1.1.9
F5 Nginx	Version 1.2.0
F5 Nginx	Version 1.3.0
F5 Nginx	Version 1.3.10
F5 Nginx	Version 1.3.11
F5 Nginx	Version 1.3.12
F5 Nginx	Version 1.3.1
F5 Nginx	Version 1.3.2
F5 Nginx	Version 1.3.3
F5 Nginx	Version 1.3.4
F5 Nginx	Version 1.3.5
F5 Nginx	Version 1.3.6
F5 Nginx	Version 1.3.7
F5 Nginx	Version 1.3.8
F5 Nginx	Version 1.3.9