medium4.0
CVE-2018-20105
A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn …
Impact
A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2. openSUSE Leap yast2-rmt versions prior to 1.2.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yast2-Rmt Project | Yast2-Rmt | before 1.2.2 |
| Opensuse | Leap | Version 15.0 |
| Suse | Suse Linux Enterprise Server | Version 15 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00035.html
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00015.html
- https://bugzilla.suse.com/show_bug.cgi?id=1119835
- http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00035.html
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00015.html
- https://bugzilla.suse.com/show_bug.cgi?id=1119835