Red Hat Sysreport vulnerabilities

2 CVEs affecting Red Hat Sysreport, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-2104, published 2005-10-07.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-1760, published 2005-06-13. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.
• CVE-2005-2104, published 2005-10-07. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.