Moderate: Red Hat Security Advisory: sos-collector security update

An update for sos-collector is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

sos-collector: incorrect permissions set on newly created files

It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the...

RHEL 7 : sos-collector (RHSA-2018:3663)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:3663 advisory. sos-collector is a utility that gathers sosreports from multi-node environments. sos-collector facilitates data collection for support cases and it c...

Fedora 27 : sos-collector (2018-f2f8571abd)

Update to new 1.5 release. Resolves CVE-2018-14650 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for sos-collector FEDORA-2018-1f3a47bfbb

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for sos-collector FEDORA-2018-f2f8571abd

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 28 Update: sos-collector-1.5-3.fc28

sos-collector is a utility designed to capture sosreports from multiple nod es at once and collect them into a single archive. If the nodes are part of a cluster, profiles can be used to configure how the sosreport command is run on the nodes...

[SECURITY] Fedora 27 Update: sos-collector-1.5-3.fc27

sos-collector is a utility designed to capture sosreports from multiple nod es at once and collect them into a single archive. If the nodes are part of a cluster, profiles can be used to configure how the sosreport command is run on the nodes...

[SECURITY] Fedora 29 Update: sos-collector-1.5-3.fc29

sos-collector is a utility designed to capture sosreports from multiple nod es at once and collect them into a single archive. If the nodes are part of a cluster, profiles can be used to configure how the sosreport command is run on the nodes...

sos-collector information disclosure vulnerability

sos-collector is a utility program for collecting sosreport from multiple nodes. A security vulnerability exists in sos-collector that stems from the program's failure to properly set the default permissions for newly created files, resulting in a local user being able to read all files created b...

CVE-2018-14650

It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the...

CVE-2018-14650

It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the...

Directory traversal

It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the...

CVE-2018-14650

It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the...

CVE-2018-14650

CVE-2018-14650 affects sos-collector. Root cause: newly created files in /var/tmp may have overly permissive permissions due to incorrect default settings, enabling local users to access collected data. Impact is data exposure of collected sosreports. Remediation: update to sos-collector 1.5 or a...

CVE-2018-14650

It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the...

CVE-2018-14650

It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the...

PT-2018-12642 · Ibm +2 · Sos-Collector +2

Name of the Vulnerable Software and Affected Versions: sos-collector affected versions not specified Description: A flaw was discovered in sos-collector where it fails to properly set default permissions for newly created files, making them readable by any local user. A local attacker can exploit...

sos-jeu.ch XSS vulnerability

Open Bug Bounty ID: OBB-641119 Description| Value ---|--- Affected Website:| sos-jeu.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sos-fachportal.de XSS vulnerability

Open Bug Bounty ID: OBB-613585 Description| Value ---|--- Affected Website:| sos-fachportal.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...