CVE-2015-3171

sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.
References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1218658 Issue Tracking Patch Third Party Advisory
https://github.com/sosreport/sos/commit/d7759d3ddae5fe99a340c88a1d370d65cfa73fd6 Issue Tracking Patch Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:sos_project:sos:3.2:-:*:*:*:*:*:*

History

No history.

Information

Published : 2017-07-25 18:29

Updated : 2024-02-04 19:29


NVD link : CVE-2015-3171

Mitre link : CVE-2015-3171

CVE.ORG link : CVE-2015-3171


JSON object : View

Products Affected

sos_project

  • sos
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor