CVE-2018-17957 Vulnerability Details

  /     /     /  

CVE-2018-17957 Metadata Quick Info

CVE Published: 26/12/2018 | CVE Updated: 16/09/2024 | CVE Year: 2018
Source: microfocus | Vendor: SUSE | Product: yast2-rmt
Status : PUBLISHED

---

CVE-2018-17957 Description

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-214
CWE Name: CWE-214
Source: SUSE

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).