CVE-2012-2150
xfsprogs: xfs_metadump information disclosure flaw
Severity
LowRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · July 23, 2015
Updated · November 21, 2025
Description
It was discovered that the xfs_metadump tool of the xfsprogs suite did not fully adhere to the standards of obfuscation described in its man page. In case a user with the necessary privileges used xfs_metadump and relied on the advertised obfuscation, the generated data could contain unexpected traces of potentially sensitive information.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 1.2AV:L/AC:H/Au:N/C:P/I:N/A:N
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor