Skip to content
CVE PROGRAM SOURCE RECORD3.4 Low

CVE-2018-17957

yast2-rmt leaks database passwords in process list

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microfocus

Description

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE yast2-rmt

  • unspecified to < 1.1.2affected

References