Name: CVE-2018-14348: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2018-08-14T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2018-14348, CWE-200, CVSS 8.1, EPSS 0.02316

libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information.

CVSS Details

CVSS 3.1 Base Score: 8.1
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon Linux Ami 2	—	Upgrade libcgroup-toolsUpgrade libcgroup-debuginfoUpgrade libcgroupUpgrade libcgroup-develUpgrade libcgroup-pam	Apr 27, 2020	Aug 14, 2018
Centos_linux	—	Upgrade libcgroup-toolsUpgrade libcgroup-develUpgrade libcgroup-debuginfoUpgrade libcgroupUpgrade libcgroup-pam	Aug 28, 2019	Aug 14, 2018
Debian	—	Upgrade libcgroup	Feb 19, 2019	Aug 14, 2018
Dell Powerstore Dsa2024158	—	Upgrade Dell PowerStoreOS to the latest version	Jan 13, 2026	Apr 4, 2024
Dell Powerstore Dsa2024225	—	Upgrade Dell PowerStoreOS to the latest version	Jan 13, 2026	May 29, 2024
Dell Powerstore Dsa2024287	—	Upgrade Dell PowerStoreOS to the latest version	Jan 13, 2026	Jul 2, 2024
Huawei Euleros 2_0_sp2	—	Upgrade libcgroupUpgrade libcgroup-tools	Dec 4, 2019	Aug 14, 2018
Huawei Euleros 2_0_sp3	—	Upgrade libcgroup-toolsUpgrade libcgroup	Sep 25, 2019	Aug 14, 2018
Huawei Euleros 2_0_sp5	—	Upgrade libcgroupUpgrade libcgroup-tools	Sep 12, 2019	Aug 14, 2018
Oracle_linux	—	Upgrade libcgroup-pamUpgrade libcgroup-develUpgrade libcgroup-toolsUpgrade libcgroup	Jul 21, 2020	Jul 25, 2018
Redhat_linux	—	Upgrade libcgroup-develUpgrade libcgroupUpgrade libcgroup-toolsUpgrade libcgroup-pamUpgrade libcgroup-debuginfoNo solution exists	Aug 7, 2019	Aug 14, 2018
Suse	—	Upgrade libcgroup-toolsUpgrade libcgroup-develUpgrade libcgroup1Upgrade libcgroup1-32bit	Jul 31, 2018	Jul 30, 2018
Ubuntu	—	Upgrade libcgroup-dev (Ubuntu Pro)Upgrade cgroup-tools (Ubuntu Pro)Upgrade cgroup-bin (Ubuntu Pro)Upgrade libpam-cgroup (Ubuntu Pro)Upgrade libcgroup1 (Ubuntu Pro)	Mar 22, 2023	Aug 14, 2018

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence