CVE-2015-3400

MEDIUM

zfs - Unauthorized Sensitive Information Exposure via sharenfs World-Readable Access

Title source: llm
STIX 2.1

Description

sharenfs 0.6.4, when built with commits bcdd594 and 7d08880 from the zfs repository, provides world readable access to the shared zfs file system, which might allow remote authenticated users to obtain sensitive information by reading shared files.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/74272
Third Party Advisory x_refsource_confirm
https://github.com/zfsonlinux/zfs/issues/3319
Patch, Third Party Advisory x_refsource_confirm
https://github.com/zfsonlinux/zfs/pull/2790/commits
Mailing List, VDB Entry mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2015/04/22/4

Scores

CVSS v3 4.3
EPSS 0.0164
EPSS Percentile 73.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
zfsonlinux/zfs 0.6.4
Published Oct 18, 2017
Tracked Since Feb 18, 2026