Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-77vr-pqgg-3qm9

Опубликовано: 04 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file.

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file.

EPSS

Процентиль: 21%
0.00067
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
больше 13 лет назад

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file.

EPSS

Процентиль: 21%
0.00067
Низкий

Дефекты

CWE-200