Vulnerabilities > CVE-2017-14178 - Improper Handling of Exceptional Conditions vulnerability in Snapcraft Snapd

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
snapcraft
CWE-755

Summary

In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions.

Vulnerable Configurations

Part Description Count
Application
Snapcraft
1