Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SoS 后置链接漏洞
Vulnerability Description
SoS是sosreport开源的一个可扩展的、可移植的、支持数据收集工具。用于收集系统日志和其他调试信息。 SoS 3.x版本存在后置链接漏洞。攻击者利用该漏洞从sosreport文件中获取敏感信息或提升权限。
CVSS Information
N/A
Vulnerability Type
N/A