VYPR
Unrated severityNVD Advisory· Published Apr 30, 2012· Updated Apr 29, 2026

CVE-2012-0863

CVE-2012-0863

Description

Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and configuration data by reading a file.

Affected products

3
  • Mumble/Mumble3 versions
    cpe:2.3:a:mumble:mumble:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mumble:mumble:*:*:*:*:*:*:*:*range: <=1.2.3
    • cpe:2.3:a:mumble:mumble:1.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mumble:mumble:1.2.2:*:*:*:*:*:*:*

Patches

1

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

10

News mentions

0

No linked articles in our index yet.