CVE-2020-10237

—

CVSS 3.1

5.5 medium

EPSS

<1%p14

Published

Mar 9, 2020 (Mar 9, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in Froxlor through 0.10.15. The installer wrote configuration parameters including passwords into files in /tmp, setting proper permissions only after writing the sensitive data. A local attacker could have disclosed the information if he read the file at the right time, because of _createUserdataConf in install/lib/class.FroxlorInstall.php.

Vendors: froxlor
Products: froxlor
Weakness: CWE-362
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.