CVE-2012-6472

Opera before 12.12 on UNIX uses weak permissions for the profile directory, which allows local users to obtain sensitive information by reading a (1) cache file, (2) password file, or (3) configuration file, or (4) possibly gain privileges by modifying or overwriting a configuration file.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2013-01-02

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Opera Browser (Opera)

References

• http://www.opera.com/docs/changelogs/unified/1212/
• http://www.opera.com/support/kb/view/1039/