CVE-2013-0346: Apache Tomcat

Low severity, CVSS 2.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor has stated "The tomcat log directory does not contain any sensitive information."

Affected products

• Apache Tomcat: version 7.0.0 only; version 7.0.1 only; version 7.0.2 only; version 7.0.3 only; version 7.0.4 only; version 7.0.5 only; …

Published 2014-02-15. Last modified 2026-06-16.