Sos Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Sos Project records in CISA KEV

No Sos Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sos 3 records LOW

Records

3 records in Sos · all components

TI-2015-06262 CVE-2015-7529 · GHSA-3g56-2hh3-35ph

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport…

LOW 34

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$da…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00438 Published 2017-11-06 Partial fix · 3.3 CWE-59

TI-2015-02802 CVE-2015-3171 · GHSA-gw46-8559-cggp

sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local…

LOW 25

sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00342 Published 2017-07-25 Fixed in 3.3 CWE-200

TI-2022-02601 CVE-2022-2806 · GHSA-7pf9-7cff-f854

Information disclosure in ovirt-log-collector

LOW 24

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00251 Published 2022-09-01 Fixed in 4.4 CWE-200

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0