CVE-2015-3171
MEDIUMsosreport 3.2 - Info Disclosure
Title source: llmDescription
sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.
Scores
CVSS v3
5.5
EPSS
0.0004
EPSS Percentile
10.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (3)
sos_project/sos
n/a/n/a
pypi/sosreport
< 3.3PyPI
Published
Jul 25, 2017
Tracked Since
Feb 18, 2026