CVE-2012-6472

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-01-02 · updated 2026-06-16
Weakness: CWE-264

Description

Opera before 12.12 on UNIX uses weak permissions for the profile directory, which allows local users to obtain sensitive information by reading a (1) cache file, (2) password file, or (3) configuration file, or (4) possibly gain privileges by modifying or overwriting a configuration file.

Affected products

Opera Browser: through 12.11; 1.00, 2.00, 2.10, 2.10-beta1, 2.10-beta2, 2.10-beta3 (+162)

References

http://www.opera.com/docs/changelogs/unified/1212/
http://www.opera.com/support/kb/view/1039/
http://www.opera.com/docs/changelogs/unified/1212/
http://www.opera.com/support/kb/view/1039/

Get alerted when CVE-2012-6472 or the next vulnerability affects your stack