Vulnerabilities

TI-2015-01632 CVE-2015-1815 · GHSA-6hj4-3cj5-hqm9

The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before…

MEDIUM 59

The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.16463 Published 2015-03-30 Fixed CWE-77

TI-2007-05282 CVE-2007-5496 · GHSA-mhm5-qhmr-4x2g

Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to…

LOW 11

Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name, which triggers an Access Vector Cache (AVC) log entry…

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00385 Published 2008-05-23 Fixed CWE-79

TI-2007-05281 CVE-2007-5495 · GHSA-2j7j-mg3j-2mr8

sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a…

LOW 20

sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log temporary file.

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00301 Published 2008-05-23 Fixed CWE-59

Vulnerabilities

Filters

The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before…

Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to…

sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a…