What’s Vulnerable › Vulnerabilities

CVE-2010-2058

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-06-07 · updated 2026-06-16
• Weakness: CWE-264

Description

setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password.

Affected products

• Prelude-Technologies Prewikka: 0.9.14

References

• http://secunia.com/advisories/42820
• http://security.gentoo.org/glsa/glsa-201101-07.xml
• http://www.openwall.com/lists/oss-security/2010/06/01/13
• https://bugs.gentoo.org/show_bug.cgi?id=270056
• https://dev.prelude-technologies.com/projects/prewikka/repository/revisions/17e38c310410be1b7811152172cda4438936063d
• https://dev.prelude-technologies.com/projects/prewikka/repository/revisions/17e38c310410be1b7811152172cda4438936063d/diff/setup.py
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59223
• https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00771.html
• http://secunia.com/advisories/42820
• http://security.gentoo.org/glsa/glsa-201101-07.xml
• http://www.openwall.com/lists/oss-security/2010/06/01/13
• https://bugs.gentoo.org/show_bug.cgi?id=270056

Get alerted when CVE-2010-2058 or the next vulnerability affects your stack