GCVE - cpe:2.3:a:redhat:sos:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:sos:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Sos (`fcd2c8a4-fff6-5597-8ca0-dc41bf1db3a7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:gitlab/redhat/sos`	purl2cpe	2026-06-01 10:12:53.746885

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3925`	vulnerable	2026-06-08 05:05:43.377182	Details available sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream. Published: 2014-06-01T01:00:00.000Z Updated: 2024-08-06T10:57:18.124Z Open on db.gcve.eu Reference links http://openwall.com/lists/oss-security/2014/05/29/6 http://www.ubuntu.com/usn/USN-2845-1 https://bugzilla.redhat.com/show_bug.cgi?id=1102633 http://openwall.com/lists/oss-security/2014/05/30/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2664`	vulnerable	2026-06-08 05:02:05.280338	Details available The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or password hashes. Published: 2012-06-29T19:00:00.000Z Updated: 2024-08-06T19:42:32.152Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://rhn.redhat.com/errata/RHSA-2012-0958.html http://rhn.redhat.com/errata/RHSA-2013-1121.html https://exchange.xforce.ibmcloud.com/vulnerabilities/76468 http://www.securityfocus.com/bid/54116	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4083`	vulnerable	2026-06-08 04:59:29.140817	Details available The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1) Certificate-based Red Hat Network private entitlement keys and the (2) private key for the entitlement in an archive of debugging information, which might allow remote attackers to obtain sensitive information by reading the archive. Published: 2014-02-17T16:00:00.000Z Updated: 2024-08-06T23:53:32.854Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2012-0153.html http://rhn.redhat.com/errata/RHSA-2011-1536.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.