Description
The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files.
Remediation
References
Related Vulnerabilities
WordPress Plugin Easy Testimonials Cross-Site Scripting (3.5.2)
Drupal Other Vulnerability (CVE-2006-1225)
Joomla! Core 3.0.x Information Disclosure (3.0.0 - 3.0.3)
Drupal Core 6.x Multiple Cross-Site Scripting Vulnerabilities (6.0 - 6.20)
Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51487)