CVE-2016-4445

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 21-06-2016 02:00

Last modified: - 21-06-2016 02:00

Total changes: - 8

Description

CVE-2016-4445 setroubleshoot: insecure use of commands.getstatusoutput in sealert

Common Vulnerability Scoring System (CVSS)

AV:L/AC:H/Au:N/C:C/I:C/A:C

High

Attack complexity

Local

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Privileges required

Scope

User interaction

6.2

Base score

Exploitability score

Impact score

Verification logic

AND

product=setroubleshoot-0 AND versionEndExcluding=3.0.47-12.el6_8

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=6

AND

product=setroubleshoot-plugins-0 AND versionEndExcluding=3.0.40-3.1.el6_8

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=6

AND

product=setroubleshoot-0 AND versionEndExcluding=3.2.24-1.1.el7

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=7

Reference

Keywords

CVE-2016-4445

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

REDHAT

CVE-2016-4445

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures