[{"CVE":"CVE-2018-11793","severity":"moderate","public_date":"2019-03-04T00:00:00Z","advisories":[],"bugzilla":"1687364","bugzilla_description":"CVE-2018-11793 mesos: stack overflow vulnerability in parser","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11793.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2018-14650","severity":"moderate","public_date":"2018-09-27T00:00:00Z","advisories":["RHSA-2018:3663"],"bugzilla":"1633243","bugzilla_description":"CVE-2018-14650 sos-collector: incorrect permissions set on newly created files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":["sos-collector-0:1.5-3.el7_6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14650.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2018-8023","severity":"moderate","public_date":"2018-09-21T00:00:00Z","advisories":[],"bugzilla":"1632810","bugzilla_description":"CVE-2018-8023 mesos: Exposure of HMAC value via timing vulnerability in  JWT validation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-385","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8023.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2015-7529","severity":"moderate","public_date":"2015-12-01T00:00:00Z","advisories":["RHSA-2016:0188","RHSA-2016:0152"],"bugzilla":"1282542","bugzilla_description":"CVE-2015-7529 sos: Usage of predictable temporary files allows privilege escalation","cvss_score":6.0,"cvss_scoring_vector":"AV:L/AC:H/Au:S/C:C/I:C/A:C","CWE":"CWE-377","affected_packages":["sos-0:3.2-28.el6_7.2","sos-0:3.2-35.el7_2.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7529.json"},{"CVE":"CVE-2015-3171","severity":"low","public_date":"2015-05-05T00:00:00Z","advisories":[],"bugzilla":"1218658","bugzilla_description":"CVE-2015-3171 sosreport: temporary file created with world-readable permissions","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3171.json"},{"CVE":"CVE-2014-3925","severity":"low","public_date":"2014-05-29T00:00:00Z","advisories":["RHBA-2014:1200"],"bugzilla":"1103324","bugzilla_description":"CVE-2014-3925 sos: does not indicate data sent is potentially sensitive on Red Hat Enterprise Linux 5","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["sos-0:1.7-9.73.el5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3925.json"},{"CVE":"CVE-2014-0246","severity":null,"public_date":"2014-05-27T00:00:00Z","advisories":[],"bugzilla":"1101393","bugzilla_description":"CVE-2014-0246 sos: md5 hash of GRUB password collected when running sosreport","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0246.json"},{"CVE":"CVE-2012-2664","severity":"low","public_date":"2012-02-14T00:00:00Z","advisories":["RHSA-2013:1121","RHSA-2012:0958"],"bugzilla":"826884","bugzilla_description":"CVE-2012-2664 sosreport does not blank root password in anaconda plugin","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["sos-0:1.7-9.62.el5_9.1","sos-0:2.2-29.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2664.json"},{"CVE":"CVE-2011-4083","severity":"low","public_date":"2011-12-06T00:00:00Z","advisories":["RHSA-2012:0153","RHSA-2011:1536"],"bugzilla":"749383","bugzilla_description":"CVE-2011-4083 sos: sosreport is gathering certificate-based RHN entitlement private keys","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["sos-0:1.7-9.62.el5","sos-0:2.2-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4083.json"}]