Lucene search
HistoryDec 02, 2013 - 4:36 a.m.
CVE-2012-0425
cve-2012-0425
lanitems.ycp
save_y2logs
yast2-network
cleartext credentials
sensitive information
nvd
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
56.9%
LanItems.ycp in save_y2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi credentials to the y2log log file, which allows context-dependent attackers to obtain sensitive information by reading the (1) WIRELESS_WPA_PASSWORD or (2) WIRELESS_CLIENT_KEY_PASSWORD field.
Affected configurations
Node
opensuseopensuseMatch12.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| opensuse:opensuse | opensuse | eq | 12.1 |
Related
prion
prion
Design/Logic Flaw
2013-12-02 04:36:00
cvelist
cvelist
CVE-2012-0425
2013-12-02 02:00:00
nvd
nvd
CVE-2012-0425
2013-12-02 04:36:26
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
56.9%
Related for CVE-2012-0425