2 matches found
Debian DLA-2132-1 : libzypp security update
It was discovered that there was an issue where incorrect default permissions on a HTTP cookie store could have allowed local attackers to read private credentials. For Debian 8 'Jessie', this issue has been fixed in libzypp version 14.29.1-2+deb8u1. We recommend that you upgrade your libzypp...
4CVSS6.1AI score0.00301EPSS
SaveExploits0References3
[SECURITY] [DLA 2132-1] libzypp security update
Package : libzypp Version : 14.29.1-2+deb8u1 CVE ID : CVE-2019-18900 It was discovered that there was an issue where incorrect default permissions on a HTTP cookie store could have allowed local attackers to read private credentials. For Debian 8 "Jessie", this issue has been fixed in libzypp...
4CVSS3.6AI score0.00301EPSS
SaveExploits0
20