CVE-2008-1970: Mucommander

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials.

Affected products

• Mucommander Mucommander: up to and including 0.8; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …

Published 2008-04-27. Last modified 2026-06-16.