Lucene search
GoogleOSV:CVE-2018-14650HistorySep 27, 2018 - 8:29 p.m.
CVE-2018-14650
2018-09-2720:29:00
Google
osv.dev
2
It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the /var/tmp directory.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sos-collector | eq | 1.4 |
Related
nessus
nessus
Fedora 27 : sos-collector (2018-f2f8571abd)
2018-11-01 00:00:00
RHEL 7 : sos-collector (RHSA-2018:3663)
2018-11-27 00:00:00
Oracle Linux 7 : sos-collector (ELSA-2018-3663)
2018-11-29 00:00:00
centos
centos
sos security update
2018-12-13 20:46:06
openvas
openvas
CentOS Update for sos-collector CESA-2018:3663 centos7
2018-12-18 00:00:00
Fedora Update for sos-collector FEDORA-2018-672c028631
2019-05-07 00:00:00
Fedora Update for sos-collector FEDORA-2018-1f3a47bfbb
2018-11-01 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: sos-collector-1.5-3.fc27
2018-10-31 15:25:39
[SECURITY] Fedora 28 Update: sos-collector-1.5-3.fc28
2018-10-31 15:52:58
[SECURITY] Fedora 29 Update: sos-collector-1.5-3.fc29
2018-10-30 17:45:34
ubuntucve
ubuntucve
CVE-2018-14650
2018-09-27 00:00:00
oraclelinux
oraclelinux
sos-collector security update
2018-11-28 00:00:00
cvelist
cvelist
CVE-2018-14650
2018-09-27 20:00:00
redhat
redhat
(RHSA-2018:3663) Moderate: sos-collector security update
2018-11-26 23:00:57
nvd
nvd
CVE-2018-14650
2018-09-27 20:29:00
prion
prion
Directory traversal
2018-09-27 20:29:00
cve
cve
CVE-2018-14650
2018-09-27 20:29:00
redhatcve
redhatcve
CVE-2018-14650
2018-09-27 13:49:01
veracode
veracode
Information Disclosure
2019-01-15 09:27:13