CVE-2016-1235 in OAR

Summary

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 12/27/2015
• Disclosure: 04/11/2016
• Moderation: VulDB entry created
• Entries: VDB-82079 (1)
• CPE: ready
• CWE: CWE-264 (Confirmed)
• CVSS: 8.8
• EPSS: 0.00924
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1235
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1235
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1235/