Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

sosreport

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3
Registry
PyPI

Advisories 3

  • It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered.

    Affected: fixed in 4.4.

  • sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an…

    Affected: from 3.0, fixed in 3.3; from 3.0.

  • sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain…

    Affected: fixed in 3.3; from 3.0.