sos-collector project sos-collector 1.4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sos-collector_project:sos-collector:1.4:*:*:*:*:*:*:*

part: a version: 1.4 update: *

VendorSos Collector Project (b8b79f93-5709-5985-b8b5-8dc7e6f382f8)
ProductSos Collector (3725f6ab-79e4-514f-b747-632673de0a37)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/sosreport/sos-collector purl2cpe 2026-06-01 10:16:40.875946
pkg:gitlab/redhat/sos-collector purl2cpe 2026-06-01 10:16:40.875949
pkg:rpm/centos/sos-collector purl2cpe 2026-06-01 10:16:40.875952
pkg:rpm/opensuse/sos-collector purl2cpe 2026-06-01 10:16:40.875955

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-14650 vulnerable 2026-06-08 05:10:53.217088 Details available
MEDIUM (5.9)
It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the /var/tmp directory.
Published: 2018-09-27T20:00:00.000Z
Updated: 2024-08-05T09:38:12.593Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.