CVE-2015-7529

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.

Score
CVSS 3.1 7.8 High
Status
Modified - secalert@redhat.com
Published
2017-11-06
Last modified
2024-08-06
Weaknesses
CWE-59

Affected products

References

 
 
© AVABIS GmbH privacypolicy about