CVE-2018-17957 LOW

CVE-2018-17957: yast2-rmt leaks database passwords in process list

Vendor Suse
Product yast2-rmt
Weakness CWE-214
Published December 26, 2018
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

3.4/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database.

Key dates

02Disclosure timeline

December 26, 2018 CVE published
September 16, 2024 Record updated