CVE-2014-0246

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive.

Score

CVSS 2.0 4.3 Medium

Status

Modified - secalert@redhat.com

Published

2014-05-29

Last modified

2024-08-06

Weaknesses

CWE-255

Affected products

• Sosreport (Sosreport Project)

References

• http://www.openwall.com/lists/oss-security/2014/05/27/1
• http://www.securityfocus.com/bid/67634
• https://bugzilla.redhat.com/show_bug.cgi?id=1101393