Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or password hashes.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat sos数据包安全漏洞
Vulnerability Description
Red Hat sos是美国红帽（Red Hat）公司的一套用于收集系统硬件、日志和配置文件信息的工具。 Red Hat sos包2.2-29之前版本中的sosreport实用工具中存在漏洞，该漏洞源于创建调试信息的存档时Kickstart配置文件（/root/anaconda-ks.cfg）中未删除根用户的密码信息。攻击者可利用该漏洞获取密码或密码散列值。
CVSS Information
N/A
Vulnerability Type
N/A