It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the /var/tmp directory.

Update to new 1.5 release.

Resolves CVE-2018-14650

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for sos-collector is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

sos-collector is a utility that gathers sosreports from multi-node environments. sos-collector facilitates data collection for support cases and it can be run from either a node or from an administrator's local workstation that has network access to the environment.

The following packages have been upgraded to a later upstream version:
sos-collector (1.5). (BZ#1644776)

Security Fix(es) :

* sos-collector: incorrect permissions set on newly created files (CVE-2018-14650)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

This issue was discovered by Riccardo Schirone (Red Hat Product Security).

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-3663 advisory.

    [1.5-3.0.1]
    - To recognize OL system[OraBug 28807430]
    - import os module to detect /etc/redhat-release [OraBug 28740046]

    [1.5-3]
    - Resolve race condition in cluster profile loading
    - Quote all options globally
    - RHBZ#1633515
    - RHBZ#1647955

    [1.5-2]
    - Fix cluster option reporting

    [1.5-1]
    - Update to version 1.5
    - Resolves CVE-2018-14650

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The following packages have been upgraded to a later upstream version:
sos-collector (1.5).

Security Fix(es) :

  - sos-collector: incorrect permissions set on newly     created files (CVE-2018-14650)

This issue was discovered by Riccardo Schirone (Red Hat Product Security).

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:3663 advisory.

    sos-collector is a utility that gathers sosreports from multi-node environments. sos-collector facilitates     data collection for support cases and it can be run from either a node or from an administrator's local     workstation that has network access to the environment.

    The following packages have been upgraded to a later upstream version: sos-collector (1.5). (BZ#1644776)

    Security Fix(es):

    * sos-collector: incorrect permissions set on newly created files (CVE-2018-14650)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    This issue was discovered by Riccardo Schirone (Red Hat Product Security).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
120482	Fedora 29 : sos-collector (2018-672c028631)	Nessus	Fedora Local Security Checks	medium
120280	Fedora 28 : sos-collector (2018-1f3a47bfbb)	Nessus	Fedora Local Security Checks	medium
119663	CentOS 7 : sos-collector (CESA-2018:3663)	Nessus	CentOS Local Security Checks	medium
119278	Oracle Linux 7 : sos-collector (ELSA-2018-3663)	Nessus	Oracle Linux Local Security Checks	medium
119252	Scientific Linux Security Update : sos-collector on SL7.x (noarch) (20181127)	Nessus	Scientific Linux Local Security Checks	medium
119171	RHEL 7 : sos-collector (RHSA-2018:3663)	Nessus	Red Hat Local Security Checks	medium
118581	Fedora 27 : sos-collector (2018-f2f8571abd)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2018-14650

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium