Lucene search

K
cve[email protected]CVE-2011-4083
HistoryFeb 17, 2014 - 4:55 p.m.

CVE-2011-4083

2014-02-1716:55:07
CWE-310
web.nvd.nist.gov
26
cve-2011-4083
sosreport
red hat
nvd
security vulnerability
sensitive information
remote attack

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.1%

The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1) Certificate-based Red Hat Network private entitlement keys and the (2) private key for the entitlement in an archive of debugging information, which might allow remote attackers to obtain sensitive information by reading the archive.

Affected configurations

NVD
Node
redhatsosMatch2.2-3
OR
redhatsosMatch2.2-6
OR
redhatsosMatch2.2-7
OR
redhatsosMatch2.2-8
OR
redhatsosMatch2.2-9
OR
redhatsosMatch2.2-10
OR
redhatsosMatch2.2-11
OR
redhatsosMatch2.2-14
OR
redhatsosMatch2.2-15
OR
redhatsosMatch2.2-16
Node
redhatsosRange1.7-6
OR
redhatsosMatch1.6
OR
redhatsosMatch1.7
OR
redhatsosMatch1.7-8

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.1%