CVE-2018-17956CWE-200

Password exposed in process listing

Low · published March 15, 2019

CVSS v3.0
3.3
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provision, allowing local attackers to read them in the process list

The record
Technical detail
CVSS v3.0
3.3 · LOW
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00341 · 26.4th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2019-03-15T20:00Z
EPSS history
Timeline
  • 15 MAR 20:00Z
    Password exposed in process listing
    cvelistv5