SUSE CVE-2020-10237

An issue was discovered in Froxlor through 0.10.15. The installer wrote configuration parameters including passwords into files in /tmp, setting proper permissions only after writing the sensitive data. A local attacker could have disclosed the information if he read the file at the right time,...

CVE-2020-10237

Mode C: CVE-2020-10237 affects Froxlor up to 0.10.15. The installer writes configuration data, including passwords, to files in /tmp and only restores proper permissions after writing the sensitive data, enabling potential local disclosure if the file is read at the right time via _createUserdata...