Security Advisory
CVE-2015-3171
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.