CVE-2012-2389

Severity CVSS v4.0:
Pending analysis
Type:
CWE-264 Permissions, Privileges, and Access Control
Publication date:
21/06/2012
Last modified:
11/04/2025

Description

hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might allow local users to obtain sensitive information such as credentials.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:w1.fi:hostapd:0.7.3:*:*:*:*:*:*:*