CoreCVE
Back

HIGH

yast2-rmt leaks database passwords in process list

Published Dec 26, 2018

Description

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-214

CWE-287

Improper Authentication

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner microfocus
Published Dec 26, 2018
Updated Sep 16, 2024
Reserved Oct 3, 2018
Link CVE-2018-17957
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-17957
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-17957