Описание
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libosinfo | fixed | 1.6.0-1 | package | |
| libosinfo | ignored | buster | package | |
| libosinfo | ignored | stretch | package | |
| libosinfo | postponed | jessie | package |
Примечания
https://www.redhat.com/archives/libosinfo/2019-July/msg00026.html
EPSS
Процентиль: 36%
0.00431
Низкий
Связанные уязвимости
CVSS3: 7.8
ubuntu
около 7 лет назад
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line.
CVSS3: 2.8
redhat
около 7 лет назад
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line.
CVSS3: 7.8
nvd
около 7 лет назад
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line.
EPSS
Процентиль: 36%
0.00431
Низкий