SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors...
2.1CVSS6.3AI score0.00369EPSS
SaveExploits0References4
Cvelist•added 2018/10/02 7:0 p.m.•24 views
CVE-2018-11748
Previous releases of the Puppet devicemanager module creates configuration files containing credentials that are world readable. This issue has been resolved as of devicemanager 2.7.0...
