CVE-2015-3201

Thermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which allows local users to obtain user credentials by reading the…

published June 8, 2015

CVSS
—
EPSS
1%
Percentile
42.1
In the wild
Unconfirmed
What it is

Thermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which allows local users to obtain user credentials by reading the file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00507 · 42.1th percentile
Published
2015-06-08T14:00Z
EPSS history
Timeline
  • 08 JUN 14:00Z
    Thermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which allows local users to obtain user credentials by reading the…
    cvelistv5