Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2024-22037

Database password leaked by systemd uyuni-server-attestation service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

The uyuni-server-attestation systemd service needs a database_password environment variable. This file has 640 permission, and cannot be shown users, but the environment is still exposed by systemd to non-privileged users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE SUSE Manager Server 5.0

Default version status: unaffected

  • ? to < 0.1.26-150500.3.12.2affected

SUSE SUSE Manager Server 5.0

Default version status: unaffected

  • ? to < 0.1.26-150500.3.12.2affected

SUSE SUSE Manager Server 5.0

Default version status: unaffected

  • ? to < 0.1.26-150500.3.12.2affected

SUSE SUSE Manager Server 5.0

Default version status: unaffected

  • ? to < 0.1.26-150500.3.12.2affected

References