rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive     information by reading files in /var/log/cron. (CVE-2015-3243)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for rsyslog fixes the following security issue :

  - CVE-2015-3243: Prevent weak permissions for generated     log files, which allowed local users to obtain sensitive     information (bsc#935393).

This update was imported from the SUSE:SLE-15:Update update project.

This update for rsyslog fixes the following security issue :

  - CVE-2015-3243: Prevent weak permissions for generated     log files, which allowed local users to obtain sensitive     information (bsc#935393).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for rsyslog fixes the following issues :

The following security vulnerability was addressed :

CVE-2015-3243: Make sure that log files are not created world-readable (bsc#935393)

This update was imported from the SUSE:SLE-12-SP3:Update update project.

This update for rsyslog fixes the following issues: The following security vulnerability was addressed :

  - CVE-2015-3243: Make sure that log files are not created     world-readable (bsc#935393)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
218911	Linux Distros Unpatched Vulnerability : CVE-2015-3243	Nessus	Misc.	medium
123221	openSUSE Security Update : rsyslog (openSUSE-2019-523)	Nessus	SuSE Local Security Checks	medium
120044	SUSE SLED15 / SLES15 Security Update : rsyslog (SUSE-SU-2018:1937-2)	Nessus	SuSE Local Security Checks	medium
120043	SUSE SLED15 / SLES15 Security Update : rsyslog (SUSE-SU-2018:1937-1)	Nessus	SuSE Local Security Checks	medium
111502	openSUSE Security Update : rsyslog (openSUSE-2018-789)	Nessus	SuSE Local Security Checks	medium
111262	SUSE SLED12 / SLES12 Security Update : rsyslog (SUSE-SU-2018:2038-1)	Nessus	SuSE Local Security Checks	medium
111195	openSUSE Security Update : rsyslog (openSUSE-2018-738)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2015-3243

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium