Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade mumble | Jul 30, 2024 | Apr 30, 2012 |
| Suse | — | Upgrade mumble-debuginfoUpgrade mumble-debugsourceUpgrade mumble-32bitUpgrade mumble-serverUpgrade mumble-server-debuginfoUpgrade mumble-debuginfo-32bitUpgrade mumble | Dec 12, 2013 | Apr 30, 2012 |
| Ubuntu | — | Upgrade mumble | Nov 19, 2024 | Apr 30, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub