Local File Access Vulnerability in Rsyslog by Adiscon
CVE-2015-3243

5.5MEDIUM

Key Information:

Vendor

Rsyslog

Status
Rsyslog
Vendor
CVE Published:
25 July 2017

What is CVE-2015-3243?

Rsyslog, a widely-used logging system, has a vulnerability arising from inadequate permission settings for log file creation. This issue permits local users to access and read sensitive information from files located in the /var/log/cron directory, potentially leading to unauthorized information disclosure.

References

http://www.securityfocus.com/bid/75298
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032885
vdb-entryx_refsource_SECTRACK
http://www.openwall.com/lists/oss-security/2015/06/20/3
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.