Описание
The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libzypp | fixed | 17.25.5-2 | package | |
| libzypp | ignored | buster | package | |
| libzypp | ignored | jessie | package |
Примечания
https://bugzilla.suse.com/show_bug.cgi?id=1050625
https://github.com/openSUSE/libzypp/commit/c693f46ca9bf18dda9b4b56f78e069e26b5b03ff (17.25.3)
EPSS
Процентиль: 26%
0.00331
Низкий
Связанные уязвимости
CVSS3: 3.3
ubuntu
больше 8 лет назад
The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.
CVSS3: 3.3
nvd
больше 8 лет назад
The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.
EPSS
Процентиль: 26%
0.00331
Низкий