Launchpad.net

CVE 2014-0246

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive.

See the CVE page on Mitre.org for more details.