Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Snapcraft Clear all filters
TI-2017-10330 CVE-2017-14178

Improper handling of exceptional conditions in snapd

Priority LOW 36

In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01757 Published 2018-02-02 No fix listed CWE-755