CVE-2013-5364

Severity: low (CVSS 3.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-01-26 · updated 2026-06-16
Weakness: CWE-264

Description

Secunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, when running on Red Hat Linux, uses world-readable and world-writable permissions for /etc/csia_config.xml, which allows local users to change CSI Agent configuration by modifying this file.

Affected products

Secunia Csi Agent: from 6.0.0 through 6.0.0.15017; from 6.0.1 through 6.0.1.1007; from 7.0.0 through 7.0.0.21

References

http://osvdb.org/101901
http://secunia.com/advisories/56380
http://secunia.com/vulnerability_scanning/corporate/release-history/
http://www.securityfocus.com/bid/64775
https://exchange.xforce.ibmcloud.com/vulnerabilities/90230
http://osvdb.org/101901
http://secunia.com/advisories/56380
http://secunia.com/vulnerability_scanning/corporate/release-history/
http://www.securityfocus.com/bid/64775
https://exchange.xforce.ibmcloud.com/vulnerabilities/90230

Get alerted when CVE-2013-5364 or the next vulnerability affects your stack