CVEvulnerability

CVE-2016-7091

4.4 MEDIUM Published 2016-12-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-12-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.4 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
CWE-200

Description

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from specially formatted files with elevated privileges provided by sudo.

Affected configurations

• redhat enterprise linux • redhat enterprise linux desktop 7.0 • redhat enterprise linux hpc node 7.0 • redhat enterprise linux server 7.0 • redhat enterprise linux workstation 7.0

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References