high7.8
CVE-2018-17956
In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provisio…
Impact
In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provision, allowing local attackers to read them in the process list
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opensuse | Yast2-Samba-Provision | through 1.0.1 |