Detections
Analytics
Scientific Linux Security Update : subscription-manager on SL7.x x86_64 (20161103)
low Nessus Plugin ID 96386
Language:
Synopsis
The remote Scientific Linux host is missing one or more security updates.Description
* It was found that subscription-manager set weak permissions on files in /var/lib/rhsm/, causing an information disclosure. A local, unprivileged user could use this flaw to access sensitive data that could potentially be used in a social engineering attack.(CVE-2016-4455)
Solution
Update the affected packages.See Also
Plugin Details
Severity: Low
ID: 96386
File Name: sl_20161103_subscription_manager_on_SL7_x.nasl
Version: 3.6
Type: local
Agent: unix
Published: 1/10/2017
Updated: 1/14/2021
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 1.4
CVSS v2
Risk Factor: Low
Base Score: 2.1
Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSS v3
Risk Factor: Low
Base Score: 3.3
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Information
CPE: p-cpe:/a:fermilab:scientific_linux:python-rhsm, p-cpe:/a:fermilab:scientific_linux:subscription-manager-gui, p-cpe:/a:fermilab:scientific_linux:subscription-manager-migration-data, p-cpe:/a:fermilab:scientific_linux:python-rhsm-certificates, x-cpe:/o:fermilab:scientific_linux, p-cpe:/a:fermilab:scientific_linux:subscription-manager-plugin-ostree, p-cpe:/a:fermilab:scientific_linux:python-rhsm-debuginfo, p-cpe:/a:fermilab:scientific_linux:subscription-manager-plugin-container, p-cpe:/a:fermilab:scientific_linux:subscription-manager-initial-setup-addon, p-cpe:/a:fermilab:scientific_linux:subscription-manager, p-cpe:/a:fermilab:scientific_linux:subscription-manager-debuginfo, p-cpe:/a:fermilab:scientific_linux:subscription-manager-migration
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RedHat/release, Host/RedHat/rpm-list
Patch Publication Date: 11/3/2016
Vulnerability Publication Date: 4/14/2017
Reference Information
CVE: CVE-2016-4455