Skip to content
fr Sign in
4.4 Medium

CVE-2022-45154 A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE…

Description

A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 allows attackers that get access to the support logs to gain knowledge of the stored credentials This issue affects: SUSE Linux Enterprise Server 12 supportutils version 3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Information and prior versions. SUSE Linux Enterprise Server 15 supportutils version 3.1.21-150000.5.44.1 and prior versions. SUSE Linux Enterprise Server 15 SP3 supportutils version 3.1.21-150300.7.35.15.1 and prior versions.

Affected products and versions

Product Affected versions Fixed in
SUSE Linux Enterprise Server 12 Versions not published
SUSE Linux Enterprise Server 15 3.1 earliest → 3.1.21-150000.5.44.1 No fix stated
SUSE Linux Enterprise Server 15 SP3 3.1 earliest → 3.1.21-150300.7.35.15.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SUSE Linux Enterprise Server 12

The 12 CVEs of SUSE Linux Enterprise Server 12 →
CVE-2019-18905 A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE… 4.8 Medium CVE-2019-18902 A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE… 7.5 High CVE-2019-18903 A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE… 7.5 High CVE-2020-8013 A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux… 2.2 Low
Track this CVE