The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-gtk-develUpgrade libreportUpgrade libreport-webUpgrade abrt-addon-ccppUpgrade abrt-dbusUpgrade abrt-addon-pythonUpgrade abrt-cliUpgrade abrt-pythonUpgrade libreport-cliUpgrade libreport-plugin-rhtsupportUpgrade abrt-python-docUpgrade abrt-gui-develUpgrade abrt-desktopUpgrade libreport-centosUpgrade libreport-plugin-mailxUpgrade abrt-addon-xorgUpgrade libreport-plugin-kerneloopsUpgrade abrt-addon-pstoreoopsUpgrade abrt-guiUpgrade libreport-gtkUpgrade abrt-develUpgrade abrt-libsUpgrade libreport-web-develUpgrade abrt-addon-kerneloopsUpgrade libreport-develUpgrade abrt-addon-upload-watchUpgrade abrt-console-notificationUpgrade libreport-plugin-ureportUpgrade libreport-plugin-mantisbtUpgrade abrt-tuiUpgrade abrt-gui-libsUpgrade libreport-rhelUpgrade abrt-retrace-clientUpgrade libreport-newtUpgrade abrt-addon-vmcoreUpgrade libreport-plugin-reportuploaderUpgrade libreport-compatUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-anacondaUpgrade libreport-pythonUpgrade libreport-rhel-bugzillaUpgrade abrtUpgrade libreport-plugin-loggerUpgrade libreport-filesystemUpgrade libreport-plugin-bugzilla | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-desktopUpgrade libreport-anacondaUpgrade abrt-python-docUpgrade abrt-retrace-clientUpgrade abrt-addon-ccppUpgrade libreport-newtUpgrade libreport-pythonUpgrade abrt-libsUpgrade abrt-develUpgrade libreport-plugin-reportuploaderUpgrade libreport-plugin-ureportUpgrade libreport-webUpgrade abrt-console-notificationUpgrade libreportUpgrade libreport-plugin-bugzillaUpgrade libreport-cliUpgrade abrt-addon-pstoreoopsUpgrade libreport-plugin-kerneloopsUpgrade abrt-addon-upload-watchUpgrade abrt-addon-pythonUpgrade abrt-gui-develUpgrade libreport-compatUpgrade libreport-gtk-develUpgrade libreport-rhel-bugzillaUpgrade abrt-tuiUpgrade abrt-cliUpgrade abrt-dbusUpgrade libreport-web-develUpgrade libreport-gtkUpgrade libreport-plugin-loggerUpgrade abrt-pythonUpgrade libreport-develUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-vmcoreUpgrade abrt-addon-xorgUpgrade libreport-plugin-mailxUpgrade abrt-guiUpgrade libreport-filesystemUpgrade abrt-gui-libsUpgrade abrt | Oct 16, 2024 | Jun 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub