Security Advisory
CVE-2013-7458
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.