Описание
cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.
A flaw was found in cifs-utils. When verbose logging is enabled, invalid credentials file lines may be dumped to stderr. This may lead to information disclosure in particular conditions when the credentials file given is sensitive and contains '=' signs.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | cifs-utils | Out of support scope | ||
| Red Hat Enterprise Linux 7 | cifs-utils | Out of support scope | ||
| Red Hat Enterprise Linux 8 | cifs-utils | Fix deferred | ||
| Red Hat Enterprise Linux 9 | cifs-utils | Fix deferred |
Показывать по
Дополнительная информация
Статус:
4.3 Medium
CVSS3
Связанные уязвимости
cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.
cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.
cifs-utils through 6.14, with verbose logging, can cause an informatio ...
4.3 Medium
CVSS3