SUSE CVE-2015-7529

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date...

K81192137: sosreport vulnerability CVE-2015-7529

Security Advisory Description sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date...

Ubuntu: Security Advisory (USN-5636-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5636-1 sosreport vulnerability

It was discovered that SoS incorrectly handled certain data. An attacker could possibly use this issue to expose sensitive information...

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6 ovirt-log-collector-4.4.7-2.el8ev

...

Information Disclosure

sosreport is vulnerable to information disclosure. A local unauthenticated attacker is able to gain access to RHV admin passwords due to the flawed business logic in postproc function in ovirt.py...

GHSA-7PF9-7CFF-F854 sosreport Exposure of Sensitive Information vulnerability

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

sosreport Exposure of Sensitive Information vulnerability

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

CVE-2022-2806

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

CVE-2022-2806

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

UBUNTU-CVE-2022-2806

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

Code injection

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

CVE-2022-2806

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

CVE-2022-2806

This CVE (CVE-2022-2806) concerns the sos/os-report tooling used by ovirt-log-collector where the RHV admin password could be collected unfiltered. The vulnerability is tied to the sos package and related components; fixes were released in sos-4.2-20.el8_6 and ovirt-log-collector-4.4.7-2.el8ev. A...

PT-2022-18786

Name of the Vulnerable Software and Affected Versions ovirt-log-collector versions prior to 4.4.7-2.el8ev sosreport versions prior to 4.2-20.el8 6 Description The issue concerns the handling of sensitive information by the sosreport and ovirt-log-collector. Specifically, it was found that the...

CVE-2022-2806: Exposure of Sensitive Information to an Unauthorized Actor

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...

SoS 安全漏洞

SoS is sosreport open source an extensible , portable , support data collection tool . Used to collect system logs and other debugging information. SoS suffers from a security vulnerability that stems from ovirt-log-collector/sosreport collecting unfiltered RHV administrator passwords...

PT-2022-1316

Name of the Vulnerable Software and Affected Versions sos affected versions not specified Description The sos package is a set of utilities used to gather information from system hardware, logs, and configuration files for diagnostic purposes and debugging. Issues include sos collect failing to g...

SoSReport Predictable Tmp File Names

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date...

sosreport sensitive information disclosure via weak permissions of the generated archives

sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive...