PT-2016-3516

CVE-2014-9770

·

Published

2016-04-19

·

Updated

2018-10-30

Description by

CVSS 3.1
3.3
Low
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions systemd versions prior to 214
Description The issue concerns weak permissions for journal files under /run/log/journal/%m and /var/log/journal/%m, allowing local users to obtain sensitive information by reading these files.
Recommendations For versions prior to 214, update to version 214 or later to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2014-9770
OPENSUSE-SU-2016_1101-1
SUSE-SU-2016:1346-1
SUSE-SU-2016_1346-1
SUSE-SU-2016:1351-1
SUSE-SU-2016_1351-1
SUSE-SU-2017:2699-1
SUSE-SU-2017:2700-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com