CVE-2015-3171

MEDIUM

sosreport < 3.3 - Exposure of Sensitive Information via Weak Archive Permissions

Title source: llm
STIX 2.1

Description

sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.

References (2)

Core 2
Core References
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1218658

Scores

CVSS v3 5.5
EPSS 0.0034
EPSS Percentile 26.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
pypi/sosreport 0 - 3.3PyPI
sos_project/sos 3.2
Published Jul 25, 2017
Tracked Since Feb 18, 2026