CVE-2020-12831 - CVE House
Back to Database
Status published Medium CVE-2020-12831

An issue was discovered in FRRouting FRR (aka Free Range...

Vulnerability Description

An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the split-config feature, the init script creates an empty config file with world-readable default permissions, leading to a possible information leak via tools/frr.in and tools/frrcommon.sh.in. NOTE: some parties consider this user error, not a vulnerability, because the permissions are under the control of the user before any sensitive information is present in the file

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-12831

Credits & Attribution

No credits recorded in the NVD database.

References

More from linuxfoundation

View All →
CVE-2022-46770
qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows...
Unknown 0
CVE-2022-46463
An access control issue in Harbor v1.X.X to v2.5.3 allows...
Unknown 0
CVE-2022-45932
A SQL injection issue was discovered in AAA in OpenDaylight...
Unknown 0
CVE-2022-45931
A SQL injection issue was discovered in AAA in OpenDaylight...
Unknown 0
CVE-2022-45930
A SQL injection issue was discovered in AAA in OpenDaylight...
Unknown 0

Affected Vendor

linuxfoundation

View all reports →

Affected Software

free range routing
Vulnerable Versions:
0

Timeline

Official Publish: May 13th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.