CVE-2017-15918

Sera 1.2 stores the user's login password in plain text in their home directory

published November 1, 2017

CVSS
—
EPSS
1%
Percentile
66.5
In the wild
Unconfirmed
What it is

Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01151 · 66.5th percentile
Published
2017-11-01T17:00Z
EPSS history
Timeline
  • 01 NOV 17:00Z
    Sera 1.2 stores the user's login password in plain text in their home directory
    cvelistv5