Skip to content
OpenAdvisories

Package · PyPI

sosreport

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2022-2806

    sosreport Exposure of Sensitive Information vulnerability

    It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

    sosreport sosreport sos Ubuntu Azure Linux PyPI
  • Medium 5.5
    CVE-2015-3171

    sosreport sensitive information disclosure via weak permissions of the generated archives

    sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.

    sosreport sosreport Debian PyPI