CVE-2013-7128

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-12-17 · updated 2026-06-17
Weakness: CWE-310

Description

Valve Bug Reporter in the valve-bugreporter package 2.10+bsos1 in Valve SteamOS Beta stores cleartext credentials in a .valve-bugreporter.cfg file upon a Remember Credentials action, which allows local users to obtain sensitive information by reading this file.

Affected products

Valvesoftware Steamos: all versions

References

https://github.com/ValveSoftware/SteamOS/issues/19
https://github.com/ValveSoftware/SteamOS/issues/19

Get alerted when CVE-2013-7128 or the next vulnerability affects your stack