Описание
sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| esm-infra-legacy/trusty | not-affected | 3.1-1ubuntu2.1 |
| precise | DNE | |
| trusty | not-affected | 3.1-1ubuntu2.1 |
| trusty/esm | not-affected | 3.1-1ubuntu2.1 |
| upstream | released | 3.2-2 |
| utopic | not-affected | 3.1-1ubuntu3 |
| vivid | not-affected | 3.2-2 |
Показывать по
Ссылки на источники
EPSS
2.1 Low
CVSS2
5.5 Medium
CVSS3
Связанные уязвимости
sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.
sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.
sosreport 3.2 uses weak permissions for generated sosreport archives, ...
sosreport sensitive information disclosure via weak permissions of the generated archives
EPSS
2.1 Low
CVSS2
5.5 Medium
CVSS3