MEDIUM5.5CVE-2015-3171sosreport sensitive information disclosure via weak permissions of the generated archives
from 0, < 3.2-2
—CVE-2014-0246SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by re…