CVE-2016-4989

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 21-06-2016 02:00

Last modified: - 21-06-2016 02:00

Total changes: - 8

Description

CVE-2016-4989 setroubleshoot: command injection issues

Common Vulnerability Scoring System (CVSS)

AV:L/AC:M/Au:N/C:C/I:C/A:C

Low

Attack complexity

Local

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Privileges required

Scope

User interaction

6.9

Base score

Exploitability score

Impact score

Verification logic

AND

product=setroubleshoot-0 AND versionEndExcluding=3.0.47-12.el6_8

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=6

AND

product=setroubleshoot-plugins-0 AND versionEndExcluding=3.0.40-3.1.el6_8

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=6

AND

product=setroubleshoot-0 AND versionEndExcluding=3.2.24-4.el7_2

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=7

AND

product=setroubleshoot-plugins-0 AND versionEndExcluding=3.0.59-2.el7_2

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=7

Reference

Keywords

CVE-2016-4989

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

REDHAT

CVE-2016-4989

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures