CVE-2020-12831

An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the split-config feature, the init script creates an empty config file with world-readable default permissions, leading to a possible information leak via tools/frr.in and tools/frrcommon.sh.in. NOTE: some parties consider this user error, not a vulnerability, because the permissions are under the control of the user before any sensitive information is present in the file

• CWE-732

• https://bugzilla.redhat.com/show_bug.cgi?id=1830805Exploit, Issue Tracking, Vendor Advisory
• https://github.com/FRRouting/frr/pull/6383Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1830805Exploit, Issue Tracking, Vendor Advisory
• https://github.com/FRRouting/frr/pull/6383Patch, Third Party Advisory

Published

May 13, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12826A signal access-control issue was discovered in the Linux ke…5.3
• CVE-2020-12827MJML prior to 4.6.3 contains a path traversal vulnerability …7.2
• CVE-2020-12828An issue was discovered in AnchorFree VPN SDK before 1.3.3.2…9.8
• CVE-2020-12829In QEMU through 5.0.0, an integer overflow was found in the …3.8
• CVE-2020-1283A denial of service vulnerability exists when Windows improp…6.5
• CVE-2020-12830Addressed multiple stack buffer overflow vulnerabilities tha…9.8
• CVE-2020-12832WordPress Plugin Simple File List before 4.2.8 is prone to a…9.8
• CVE-2020-12834eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 an…9.8
• CVE-2020-12835An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2…9.8
• CVE-2020-12837ismartgate PRO 1.5.9 is vulnerable to malicious file uploads…7.5
• CVE-2020-12838ismartgate PRO 1.5.9 is vulnerable to privilege escalation b…9.8
• CVE-2020-12839ismartgate PRO 1.5.9 is vulnerable to privilege escalation b…9.8