Redhat Sos vulnerabilities

3 vulnerabilities

Known vulnerabilities in Redhat Sos, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2014-3925canonicalubuntu_linux+3
EPSS score
2.15%
sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.4.3CVE-2012-2664redhatsos+1
EPSS score
1.43%
The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or password hashes.4.3CVE-2011-4083redhatsos+1
EPSS score
1.00%
The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1) Certificate-based Red Hat Network private entitlement keys and the (2) private key for the entitlement in an archive of debugging information, which might allow remote attackers to obtain sensitive information by reading the archive.