The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package before 10.0.22-2.21.2 in openSUSE 13.2 and before 10.0.22-3.1 in SUSE Linux Enterprise (SLE) 12.1 and openSUSE Leap 42.1 allows local users to discover database credentials by listing a process and its arguments.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade libmysqld19Upgrade mariadb-errormessagesUpgrade libmysqlclient18-32bitUpgrade mariadb-toolsUpgrade libmysqld-develUpgrade libmariadbd-develUpgrade mariadb-100-errormessagesUpgrade libmysqlclient_r18-32bitUpgrade libmysqlclient_r18Upgrade mariadbUpgrade libmysqld18Upgrade libmysqlclient18Upgrade mariadb-clientUpgrade libmysqlclient-develUpgrade libmariadbd19 | Apr 8, 2016 | Apr 8, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub