World-readable permissions in .rediscli_history file in linenoise

CVE-2013-7458 · LOW Severity

AV:L/AC:L/AU:N/C:P/I:N/A:N

linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.

Learn more about our User Device Pen Test.