CVE-2010-2058

setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows...

2.1 LowFix available

setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password.

Exploit likelihood

0.34%Down 0.8 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password.

Record: CVE-2010-2058
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password.

Record: CVE-2010-2058
Updated: 2026-11-02

EUVDEUVD-2010-2077 No score

setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password.

Record: EUVD-2010-2077
Updated: 2026-11-03

GitHub AdvisoriesGHSA-j97w-8mcp-pr5v No score

setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows...

setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password.

Record: GHSA-j97w-8mcp-pr5v
Updated: 2026-11-02

OSV No score

setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password.

Record: CVE-2010-2058
Updated: 2026-11-02

OSVDEBIAN-CVE-2010-2058 No score

setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password.

Record: DEBIAN-CVE-2010-2058
Updated: 2026-11-02

OSVUBUNTU-CVE-2010-2058 No score

setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password.

Record: UBUNTU-CVE-2010-2058
Updated: 2026-11-02

Affected products

prelude-technologies prewikka

Affected packages

Affected packages
Package	Affected	Fixed
`prewikka` Debian:12	before 1.0.0-1.1	1.0.0-1.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	affected
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-2058 is a low vulnerability (CVSS 2.1) in Prelude-technologies Prewikka, published June 7, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in prewikka 1.0.0-1.1.

References

Show 7 moreShow less