CVE-2019-7306

Byobu apport hook uploads user's ~/.screenrc

Medium · published April 17, 2020

CVSS v3.1
4.3
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames and passwords. This issue affects: byobu

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01773 · 78.0th percentile
Published
2020-04-17T01:45Z
EPSS history
Timeline
  • 17 APR 01:45Z
    Byobu apport hook uploads user's ~/.screenrc
    cvelistv5