Description
** DISPUTED ** Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor has stated "The tomcat log directory does not contain any sensitive information."
Remediation
References
Related Vulnerabilities
WordPress Plugin Gallery by BestWebSoft Cross-Site Scripting (4.2.1)
OpenVPN AS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-2061)
WordPress Plugin bbPress Security Bypass (2.6.3)
WordPress Plugin Team Members Cross-Site Scripting (5.0.3)
WordPress Plugin Newsletter Manager Multiple Cross-Site Scripting Vulnerabilities (1.0.1)