CVE-2012-0425

LanItems.ycp in savey2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi credentials to the y2log log file, which allows context-dependent attackers to obtain sensitive information by reading the 1 WIRELESSWPAPASSWORD or 2 WIRELESSCLIENTKEYPASSWORD field...

CVE-2012-0425

CVE-2012-0425 affects SUSE YaST, specifically LanItems.ycp in save_y2logs of yast2-network, where before version 2.24.4 the log file y2log can contain cleartext Wi‑Fi credentials. The fields (1) WIRELESS_WPA_PASSWORD and (2) WIRELESS_CLIENT_KEY_PASSWORD may be read by context-dependent attackers,...