| Package | Affected versions | Patched versions |
|---|---|---|
| luci | = 0.26.0 |
Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free