CVE-2018-17957

    Dashboard / Vulnerabilities / CVE-2018-17957

    CVE-2018-17957

    Published: 26 Dec 2018Last Modified: 8 Jul 2026

    Summary:

    Details: The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database.

    References: https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00068.html, https://bugzilla.suse.com/show_bug.cgi?id=1117602

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -f3ae6b61e21f8f7c0ad4d605b51b6107858f3cb3

    Affected versions

    v1.1.1
    v1.1.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High