Red Hat Sos vulnerabilities

3 CVEs affecting Red Hat Sos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3925, published 2014-06-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-3925, published 2014-06-01. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing…
CVE-2012-2664, published 2012-06-29. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an…
CVE-2011-4083, published 2014-02-17. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1) Certificate-based Red Hat Network private entitlement keys and the (2) private key for the entitlement…