redhat sysreport vulnerabilities

Latest redhat sysreport CVEs

Newest publication first

1. CVE-2005-2104 sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.

   Published 2005-10-07

   Low·CVSS 2.1 EPSS 0.43%

   sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.

2. CVE-2005-1760 sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.

   Published 2005-06-14

   High·CVSS 7.5 EPSS 2.0%

   sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.