CVE-2015-3243: Medium severity suse rsyslog vulnerability
It was reported that rsyslogd creates log files world-readable, which might lead to an information disclosure.
Other sources
rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3243?
CVE-2015-3243 has been classified as a medium severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2015-3243?
To fix CVE-2015-3243, ensure that proper file permissions are enforced on log files created by rsyslog to prevent world-readable access.
What are the implications of CVE-2015-3243?
The implications of CVE-2015-3243 include the risk of sensitive information being exposed to local users due to improperly set file permissions.
Which versions of rsyslog are affected by CVE-2015-3243?
CVE-2015-3243 affects all versions of rsyslog prior to the implementation of more restrictive file permission settings.
Can CVE-2015-3243 be exploited remotely?
No, CVE-2015-3243 is a local vulnerability that requires access to the system where rsyslog is running.