Information Disclosure

sosreport is vulnerable to information disclosure. A local unauthenticated attacker is able to gain access to RHV admin passwords due to the flawed business logic in postproc function in ovirt.py...

GHSA-7PF9-7CFF-F854 sosreport Exposure of Sensitive Information vulnerability

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

sosreport Exposure of Sensitive Information vulnerability

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

CVE-2022-2806

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

CVE-2022-2806

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

UBUNTU-CVE-2022-2806

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

Code injection

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

CVE-2022-2806

This CVE (CVE-2022-2806) concerns the sos/os-report tooling used by ovirt-log-collector where the RHV admin password could be collected unfiltered. The vulnerability is tied to the sos package and related components; fixes were released in sos-4.2-20.el8_6 and ovirt-log-collector-4.4.7-2.el8ev. A...

CVE-2022-2806: Exposure of Sensitive Information to an Unauthorized Actor

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

SoS 安全漏洞

SoS is sosreport open source an extensible , portable , support data collection tool . Used to collect system logs and other debugging information. SoS suffers from a security vulnerability that stems from ovirt-log-collector/sosreport collecting unfiltered RHV administrator passwords...

PT-2022-18786

Name of the Vulnerable Software and Affected Versions ovirt-log-collector versions prior to 4.4.7-2.el8ev sosreport versions prior to 4.2-20.el8 6 Description The issue concerns the handling of sensitive information by the sosreport and ovirt-log-collector. Specifically, it was found that the...

SoSReport Predictable Tmp File Names

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date...

sosreport sensitive information disclosure via weak permissions of the generated archives

sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive...

GHSA-GW46-8559-CGGP sosreport sensitive information disclosure via weak permissions of the generated archives

sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive...

ABRT - sosreport Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ABRT sosreport Privilege Escalation', 'Description' = %q This module attempts to gain root privileges on RHEL systems with a vulnerable version o...

Privilege Escalation Via Symlink Attack

sosreport is vulnerable to privilege escalation via symlink attack. It is possible because they use predictable names for temporary directory creation and handling under /tmp, and set the permission to 700. Therefore, the local attackers can create their own file, hijack the information in the fi...

SUSE-RU-2018:3638-1 Recommended update for ardana-ansible

This update for ardana-ansible fixes the following issues: ardana-ansible: - Initial checkin of info capture tool - Rename dayzero-site.yml bsc1111886 - Switch to non-legacy media layout by default. - Add Keystone Fernet master node monitoring. bsc1097241 - Add restart verb for maintenance update...

[SECURITY] Fedora 29 Update: sos-collector-1.5-3.fc29

sos-collector is a utility designed to capture sosreports from multiple nod es at once and collect them into a single archive. If the nodes are part of a cluster, profiles can be used to configure how the sosreport command is run on the nodes...

Information Disclosure

sosreport is vulnerable to information disclosure. If a malicious user can get access to the technical-support data stream and if the /etc/fstab file contains passwords, the sensitive information can be disclosed...

PYSEC-2017-73

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date...