Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4h4j-rqc9-6rq3

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.4

Описание

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from specially formatted files with elevated privileges provided by sudo.

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from specially formatted files with elevated privileges provided by sudo.

EPSS

Процентиль: 24%
0.0008
Низкий

4.4 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.4
ubuntu
больше 8 лет назад

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from specially formatted files with elevated privileges provided by sudo.

redhat
больше 9 лет назад

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from specially formatted files with elevated privileges provided by sudo.

CVSS3: 4.4
nvd
больше 8 лет назад

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from specially formatted files with elevated privileges provided by sudo.

CVSS3: 4.4
debian
больше 8 лет назад

sudo: It was discovered that the default sudo configuration on Red Hat ...

oracle-oval
почти 9 лет назад

ELSA-2016-2593: sudo security, bug fix, and enhancement update (LOW)

EPSS

Процентиль: 24%
0.0008
Низкий

4.4 Medium

CVSS3

Дефекты

CWE-200