CVE-2015-7529

State: Published
Severity: Not scored
Published: Nov 6, 2017
Updated: Aug 6, 2024
Reserved: Sep 29, 2015

Description

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

USN-2845-1vendor-advisory
https://github.com/sosreport/sos/issues/696
RHSA-2016:0152vendor-advisory
RHSA-2016:0188vendor-advisory
83162vdb-entry
https://access.redhat.com/errata/RHSA-2016:0188
https://bugzilla.redhat.com/show_bug.cgi?id=1282542
https://access.redhat.com/errata/RHSA-2016:0152

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.