CVE-2018-19638CWE-377

User can overwrite arbitrary log files in support tar

Low · published March 5, 2019

CVSS v3.0
2.2
EPSS
0%
Percentile
32.7
In the wild
Unconfirmed
What it is

In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.

The record
Technical detail
CVSS v3.0
2.2 · LOW
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00399 · 32.7th percentile
Weakness
CWE-377 · Insecure Temporary File
Published
2019-03-05T16:00Z
EPSS history
Timeline
  • 05 MAR 16:00Z
    User can overwrite arbitrary log files in support tar
    cvelistv5