CVE-2014-9770 Information disclosure in n/a
Local attackers can read sensitive journal files due to weak permissions in systemd, exposing private data.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-9770?
CVE-2014-9770 is a low-severity vulnerability in Opensuse Opensuse, published on 20 Apr 2016. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under (1) /run/log/journal/%m and (2) /var/log/journal/%m, which allows local users to obtain sensitive information by reading these files.
Weakness: CWE-264
Which versions are affected by CVE-2014-9770?
It affects 1 product.
Products include Opensuse Opensuse.
How do I fix CVE-2014-9770?
Upgrade to a fixed version.
Is CVE-2014-9770 being exploited?
There is no known exploitation of CVE-2014-9770 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Opensuse
Sources
Also known as DEBIAN-CVE-2014-9770, GHSA-pmq6-472x-q66p.