CVE:CVE-2018-14650
CNNVD:CNNVD-201809-1221
sos-collector是一款用于从多个节点收集sosreport的实用程序。
sos-collector中存在安全漏洞，该漏洞源于程序未能妥当地设置新建文件的默认权限，导致本地用户可读取该工具创建的所有文件。本地攻击者可通过等待合法用户运行sos-collector利用该漏洞窃取/var/tmp目录中收集的数据。
solution:Upgrade sos-collector_project sos-collector to a higher version than 1.4,and avoid the version 1.4; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0