CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 4.9
CWE Name:  Information Exposure
Summary: magnicomp sysinfo before 10-h81, as shipped with bmc bladelogic automation and other products, contains an information exposure vulnerability in which a local unprivileged user is able to read any root (uid 0) owned file on the system, regardless of the file permissions. confidential information such as password hashes (/etc/shadow) or other secrets (such as log files or private keys) can be leaked to the attacker. the vulnerability has a confidentiality impact, but has no direct impact on system integrity or availability.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/NONE/NONE
Published Date: 2018-05-21
Last Modified Date: 2018-10-09