CVE-2019-13313

Name of the Vulnerable Software and Affected Versions libosinfo version 1.5.0

Description The issue allows local users to discover credentials by listing a process. This occurs because credentials are passed to osinfo-install-script via the command line. There is no information available about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations For libosinfo version 1.5.0, consider restricting access to the command line or modifying how credentials are passed to osinfo-install-script to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.