Red Hat Security AdvisoryRHSA-2018:3663
sos-collector security update
Released 2018-11-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) sos-collector-1.5-3.el7_6
- Red Hat Enterprise Linux ComputeNode (v. 7) sos-collector-1.5-3.el7_6
- Red Hat Enterprise Linux Server (v. 7) sos-collector-1.5-3.el7_6
- Red Hat Enterprise Linux Workstation (v. 7) sos-collector-1.5-3.el7_6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) sos-collector-1.5-3.el7_6
Fixes 1 record
Priority LOW 27
It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user.
CVSS 3.0MEDIUM 5.9· Local · Low privileges · User interaction · EPSS 0.00429 · Published 2018-09-27 · Fixed CWE-732