Количество 4
Количество 4
CVE-2016-1601
yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors.
openSUSE-SU-2016:1226-1
Security update for yast2-users
SUSE-SU-2016:1138-1
Security update for yast2-users
GHSA-m3qr-hrgx-v5ph
yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2016-1601 yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors. | CVSS3: 9.8 | 0% Низкий | почти 10 лет назад |
 | openSUSE-SU-2016:1226-1 Security update for yast2-users | 0% Низкий | почти 10 лет назад | |
| SUSE-SU-2016:1138-1 Security update for yast2-users | 0% Низкий | почти 10 лет назад | |
| GHSA-m3qr-hrgx-v5ph yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors. | CVSS3: 9.8 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу