CVE-2015-3201
Thermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which allows local users to obtain user credentials by reading the file.
Published: 2015-06-08 · CVSS: Unscored
Thermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which allows local users to obtain user credentials by reading the file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7