Sos Project Sos
3 CVEs affecting Sos Project Sos. Latest disclosed: 2022-09-01. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-7529 | High | 7.8 | 2017-11-06 | sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a te… |
CVE-2022-2806 | Medium | 5.5 | 2022-09-01 | It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev |
CVE-2015-3171 | Medium | 5.5 | 2017-07-25 | sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by read… |