CVE-2019-3684CWE-922

susemanager installer creates world-readable swap files

Medium · published May 13, 2019

CVSS v3.0
4.0
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem

The record
Technical detail
CVSS v3.0
4.0 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00714 · 53.1th percentile
Weakness
CWE-922 · Insecure Storage of Sensitive Information
Published
2019-05-13T14:17Z
EPSS history
Timeline
  • 13 MAY 14:17Z
    susemanager installer creates world-readable swap files
    cvelistv5