CVE-2018-17957CWE-214

yast2-rmt leaks database passwords in process list

Low · published December 26, 2018

CVSS v3.0
3.4
EPSS
0%
Percentile
30.3
In the wild
Unconfirmed
What it is

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database.

The record
Technical detail
CVSS v3.0
3.4 · LOW
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00375 · 30.3th percentile
Weakness
CWE-214 · Invocation of Process Using Visible Sensitive Information
Published
2018-12-26T15:00Z
EPSS history
Timeline
  • 26 DEC 15:00Z
    yast2-rmt leaks database passwords in process list
    cvelistv5