A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 allows attackers that get access to the support logs to gain knowledge of the stored credentials This issue affects: SUSE Linux Enterprise Server 12 supportutils version 3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Information and prior versions. SUSE Linux Enterprise Server 15 supportutils version 3.1.21-150000.5.44.1 and prior versions. SUSE Linux Enterprise Server 15 SP3 supportutils version 3.1.21-150300.7.35.15.1 and prior versions.
References
Link | Resource |
---|---|
https://bugzilla.suse.com/show_bug.cgi?id=1207598 | Exploit Issue Tracking |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
History
24 Feb 2023, 18:58
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-02-15 10:15
Updated : 2024-02-04 23:14
NVD link : CVE-2022-45154
Mitre link : CVE-2022-45154
CVE.ORG link : CVE-2022-45154
JSON object : View
Products Affected
opensuse
- supportutils
suse
- linux_enterprise_server
CWE
CWE-312
Cleartext Storage of Sensitive Information