tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under (1) /run/log/journal/%m and (2) /var/log/journal/%m, which allows local users to obtain sensitive. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.
Privilege Escalation
Opensuse
NVD
CVSS 3.0
3.3
EPSS
0.1%
tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.
Privilege Escalation
Opensuse
NVD
GitHub
CVSS 3.0
3.3
EPSS
0.1%