low3.3
CVE-2017-9271
The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.
Impact
The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opensuse | Zypper | All versions |
| Fedoraproject | Fedora | Version 33 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.suse.com/show_bug.cgi?id=1050625
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VP2DNHXEQFHXBCTSREPNR7BU4EX64SQG/
- https://www.suse.com/de-de/security/cve/CVE-2017-9271/
- https://bugzilla.suse.com/show_bug.cgi?id=1050625
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VP2DNHXEQFHXBCTSREPNR7BU4EX64SQG/
- https://www.suse.com/de-de/security/cve/CVE-2017-9271/