Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2015-3171

sosreport: temporary file created with world-readable permissions

sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Sos Project
Products
Sos
CVE-2015-7529

sos: Usage of predictable temporary files allows privilege escalation

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat Sos Project
Products
Ubuntu Linux Enterprise Linux Enterprise Linux Desktop and 6 more
CVE-2022-2806

ovirt-log-collector: RHVM admin password is logged unfiltered

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Ovirt Redhat Sos Project
Products
Log Collector Rhev Manager Sos