CVE-2012-2150

Public on 2015-08-25
Modified on 2015-12-13
Description
It was discovered that the xfs_metadump tool of the xfsprogs suite did not fully adhere to the standards of obfuscation described in its man page. In case a user with the necessary privileges used xfs_metadump and relied on the advertised obfuscation, the generated data could contain unexpected traces of potentially sensitive information.
Severity
Low severity
Low
CVSS v3 Base Score
1.2
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 1 xfsprogs 2015-12-14 ALAS-2015-622 Fixed

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv2 1.2 AV:L/AC:H/Au:N/C:P/I:N/A:N
NVD CVSSv2 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P