libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask leading to disclosure of information.

🗓️ 18 Aug 2020 07:00:00Reported by MicrosoftType

Libcgroup up to 0.41 creates /var/log/cgred with mode 0666 regardless of umask, enabling disclosure.

Reporter	Title	Published	Views	Family All 81
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by a libcgroup vulnerability (CVE-2018-14348)	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Potential disclosure of information in IBM DataPower Gateway (CVE-2018-14348)	8 Jun 202121:47	–	ibm
Tenable Nessus	Amazon Linux 2 : libcgroup (ALAS-2019-1336)	25 Oct 201900:00	–	nessus
Tenable Nessus	CentOS 7 : libcgroup (CESA-2019:2047)	30 Aug 201900:00	–	nessus
Tenable Nessus	Debian DLA-1472-1 : libcgroup security update	22 Aug 201800:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : libcgroup (EulerOS-SA-2019-1918)	16 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : libcgroup (EulerOS-SA-2019-1953)	17 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : libcgroup (EulerOS-SA-2019-2001)	24 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : libcgroup (EulerOS-SA-2019-2512)	4 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.6.0 : libcgroup (EulerOS-SA-2020-1731)	1 Jul 202000:00	–	nessus