Name: CVE-2019-13313: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2019-07-05T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2019-13313, CWE-200, CVSS 7.8, EPSS 0.0005

libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line.

CVSS Details

CVSS 3.1 Base Score: 7.8
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade libosinfo	Nov 8, 2019	Jul 5, 2019
Amazon Linux Ami 2	—	Upgrade libosinfoUpgrade libosinfo-develUpgrade libosinfo-debuginfoUpgrade libosinfo-vala	Oct 28, 2020	Jul 5, 2019
Centos_linux	—	Upgrade libosinfo-debuginfoUpgrade libosinfoUpgrade libosinfo-develUpgrade gnome-boxes-debugsourceUpgrade libosinfo-valaUpgrade gnome-boxes-debuginfoUpgrade osinfo-db-tools-debuginfoUpgrade gnome-boxesUpgrade osinfo-db-toolsUpgrade libosinfo-debugsourceUpgrade osinfo-dbUpgrade osinfo-db-tools-debugsource	Nov 6, 2019	Jul 5, 2019
Debian	—	Upgrade libosinfo	Jul 30, 2024	Jul 5, 2019
Huawei Euleros 2_0_sp2	—	Upgrade libosinfo	Sep 12, 2019	Jul 5, 2019
Huawei Euleros 2_0_sp3	—	Upgrade libosinfo	Sep 25, 2019	Jul 5, 2019
Huawei Euleros 2_0_sp5	—	Upgrade libosinfo	Sep 12, 2019	Jul 5, 2019
Huawei Euleros 2_0_sp8	—	Upgrade libosinfo	Aug 28, 2019	Jul 5, 2019
Oracle_linux	—	Upgrade libosinfo-valaUpgrade libosinfo-develUpgrade gnome-boxesUpgrade osinfo-db-toolsUpgrade osinfo-dbUpgrade libosinfo	Oct 5, 2022	Jul 5, 2019
Redhat_linux	—	Upgrade osinfo-db-tools-debugsourceUpgrade libosinfoUpgrade libosinfo-valaUpgrade libosinfo-debuginfoUpgrade libosinfo-develUpgrade gnome-boxes-debugsourceUpgrade gnome-boxes-debuginfoUpgrade gnome-boxesUpgrade osinfo-db-toolsUpgrade libosinfo-debugsourceUpgrade osinfo-db-tools-debuginfoUpgrade osinfo-db	Nov 6, 2019	Jul 5, 2019
Suse	—	Upgrade libosinfo-1_0-0Upgrade libosinfoUpgrade typelib-1_0-Libosinfo-1_0Upgrade libosinfo-langUpgrade libosinfo-devel	Sep 5, 2019	Jul 5, 2019

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence