Package impact
PyPI / sosreport
| CVE | Severity | CVSS | Risk | Published | Description | Impact |
|---|---|---|---|---|---|---|
| CVE-2015-7529 | high | 7.8 | 7.8 | 4y ago | sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by so… | |
| CVE-2015-3171 | medium | 5.5 | 5.5 | 9y ago | sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive. | |
| CVE-2022-2806 | unknown | — | — | 4y ago | sosreport Exposure of Sensitive Information vulnerability |