CVE-2015-7529

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://rhn.redhat.com/errata/RHSA-2016-0152.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0188.htmlThird Party Advisory
http://www.securityfocus.com/bid/83162Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2845-1Issue Tracking, Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:0152Issue Tracking, Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:0188Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1282542Issue Tracking, Third Party Advisory
https://github.com/sosreport/sos/issues/696Issue Tracking, Patch, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0152.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0188.htmlThird Party Advisory
http://www.securityfocus.com/bid/83162Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2845-1Issue Tracking, Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:0152Issue Tracking, Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:0188Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1282542Issue Tracking, Third Party Advisory
https://github.com/sosreport/sos/issues/696Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Nov 6, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-75365.4Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrar CVE-2015-75378.8Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authent CVE-2015-75388.8Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.CVE-2015-75397.5The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data CVE-2015-75407.5The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory alloca CVE-2015-754110.0The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-depen CVE-2015-75425.3A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates.CVE-2015-75437.0aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-CVE-2015-75449.1redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before 3.6 allows remote authenticated users with CVE-2015-75459.8The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2 CVE-2015-75467.5The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware (former CVE-2015-75478.1Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc