5.5
Medium
CVE-2024-22037 The uyuni-server-attestation systemd service needs a database_password environment variable
Description
The uyuni-server-attestation systemd service needs a database_password environment variable. This file has 640 permission, and cannot be shown users, but the environment is still exposed by systemd to non-privileged users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE Manager Server 5.0 0.1 | earliest → < 0.1.26-150500.3.12.2 | 0.1.26-150500.3.12.2 |