sos project kayıtları
sos project üreticisine ait 3 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
3 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2015-7529İstismar yok | sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an asos project · sos · CWE-59 | Yüksek7,8 | — | %0,4 | 6 Kas 2017 |
22İzleyin | CVE-2015-3171İstismar yok | sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive sos project · sos · CWE-200 | Orta5,5 | — | %0,3 | 25 Tem 2017 |
22İzleyin | CVE-2022-2806İstismar yok | It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered.ovirt · log collector · CWE-200 | Orta5,5 | — | %0,2 | 1 Eyl 2022 |
- CVE-2015-752931İzleyin
sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an a
YüksekCVSS 7,8İstismar yokEPSS %0sos project · sos6 Kas 2017
- CVE-2015-317122İzleyin
sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive
OrtaCVSS 5,5İstismar yokEPSS %0sos project · sos25 Tem 2017
- CVE-2022-280622İzleyin
It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered.
OrtaCVSS 5,5İstismar yokEPSS %0ovirt · log collector1 Eyl 2022