Libosinfo
1 CVEs
product
Monthly
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.
Information Disclosure
Libosinfo
Fedora
Enterprise Linux
Enterprise Linux Eus
+2
NVD
CVSS 3.1
7.8
EPSS
0.4%
EPSS 0%
CVSS 7.8
HIGH
PATCH
This Week
libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.
Information Disclosure
Libosinfo
Fedora
+4
NVD