CVE-2013-3713

The image creation configuration in aaa_base before 16.26.1 for openSUSE 13.1 KDE adds the root user to the "users" group when installing from a live image…

published January 11, 2014

CVSS
—
EPSS
0%
Percentile
29.2
In the wild
Unconfirmed
What it is

The image creation configuration in aaa_base before 16.26.1 for openSUSE 13.1 KDE adds the root user to the "users" group when installing from a live image, which allows local users to obtain sensitive information and possibly have other unspecified impacts, as demonstrated by reading /etc/shadow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00365 · 29.2th percentile
Published
2014-01-11T01:00Z
EPSS history
Timeline
  • 11 JAN 01:00Z
    The image creation configuration in aaa_base before 16.26.1 for openSUSE 13.1 KDE adds the root user to the "users" group when installing from a live image…
    cvelistv5