CVE-2011-4083
published 2014-02-17CVE-2011-4083: The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1) Certificate-based Red Hat Network private entitlement keys and…
PriorityP417medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
0.99%
58.8th percentile
The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1) Certificate-based Red Hat Network private entitlement keys and the (2) private key for the entitlement in an archive of debugging information, which might allow remote attackers to obtain sensitive information by reading the archive.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | sos | <= 1.7-6 | — |
| redhat | sos | — | — |
| redhat | sos | — | — |
| redhat | sos | — | — |
| redhat | sos | — | — |
| redhat | sos | — | — |
| redhat | sos | — | — |
| redhat | sos | — | — |
| redhat | sos | — | — |
| redhat | sos | — | — |
| redhat | sos | — | — |
| redhat | sos | — | — |
| redhat | sos | — | — |
| redhat | sos | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
sos: sosreport is gathering certificate-based RHN entitlement private keys
vendor_redhat·2011-12-06·CVSS 4.3
CVE-2011-4083 [MEDIUM] sos: sosreport is gathering certificate-based RHN entitlement private keys
sos: sosreport is gathering certificate-based RHN entitlement private keys
The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1) Certificate-based Red Hat Network private entitlement keys and the (2) private key for the entitlement in an archive of debugging information, which might allow remote attackers to obtain sensitive information by reading the archive.
Package: sos (Red Hat Enterprise Linux 4) - Not affected
GHSA
GHSA-27j9-864c-crj8: The sosreport utility in the Red Hat sos package before 1
ghsa_unreviewed·2022-05-17
CVE-2011-4083 [MEDIUM] GHSA-27j9-864c-crj8: The sosreport utility in the Red Hat sos package before 1
The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1) Certificate-based Red Hat Network private entitlement keys and the (2) private key for the entitlement in an archive of debugging information, which might allow remote attackers to obtain sensitive information by reading the archive.
No detection rules found.
No public exploits indexed.
2014-02-17
Published