Lucene search

[email protected]CVE-2022-45154

HistoryFeb 15, 2023 - 10:15 a.m.

CVE-2022-45154

2023-02-1510:15:17

CWE-312

[email protected]

web.nvd.nist.gov

cve

2022

45154

cleartext storage

sensitive information

vulnerability

suppportutils

suse linux enterprise server

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 allows attackers that get access to the support logs to gain knowledge of the stored credentials This issue affects: SUSE Linux Enterprise Server 12 supportutils version 3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Information and prior versions. SUSE Linux Enterprise Server 15 supportutils version 3.1.21-150000.5.44.1 and prior versions. SUSE Linux Enterprise Server 15 SP3 supportutils version 3.1.21-150300.7.35.15.1 and prior versions.

Affected configurations

NVD

Node

opensusesupportutilsRange≤3.0.10-95.51.1

AND

suselinux_enterprise_serverMatch12-

Node

opensusesupportutilsRange≤3.1.21-150000.5.44.1

AND

suselinux_enterprise_serverMatch15-

Node

opensusesupportutilsRange≤3.1.21-150300.7.35.15.1

AND

suselinux_enterprise_serverMatch15sp3

CPENameOperatorVersion
opensuse:supportutilsopensuse supportutilsle3.0.10-95.51.1

CPE	Name	Operator	Version
opensuse:supportutils	opensuse supportutils	le	3.0.10-95.51.1

CNA Affected

[
  {
    "vendor": "SUSE",
    "product": "SUSE Linux Enterprise Server 12",
    "versions": [
      {
        "version": "supportutils",
        "status": "affected",
        "lessThanOrEqual": "3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Information",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "SUSE",
    "product": "SUSE Linux Enterprise Server 15",
    "versions": [
      {
        "version": "supportutils",
        "status": "affected",
        "lessThanOrEqual": "3.1.21-150000.5.44.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "SUSE",
    "product": "SUSE Linux Enterprise Server 15 SP3",
    "versions": [
      {
        "version": "supportutils",
        "status": "affected",
        "lessThanOrEqual": "3.1.21-150300.7.35.15.1",
        "versionType": "custom"
      }
    ]
  }
]