vulnerability
SUSE: CVE-2016-5746: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 1 | (AV:L/AC:H/Au:N/C:P/I:N/A:N) | Aug 30, 2016 | Aug 30, 2016 | Jun 20, 2021 |
Severity
1
CVSS
(AV:L/AC:H/Au:N/C:P/I:N/A:N)
Published
Aug 30, 2016
Added
Aug 30, 2016
Modified
Jun 20, 2021
Description
libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf.
Solutions
suse-upgrade-libstorage-develsuse-upgrade-libstorage-rubysuse-upgrade-libstorage5suse-upgrade-libstorage6suse-upgrade-yast2-storagesuse-upgrade-yast2-storage-develsuse-upgrade-yast2-storage-lib
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.