rpm package
opensuse/yast2-rmt&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/yast2-rmt&distro=openSUSE%20Tumbleweed
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-20105 | — | < 1.3.3-1.2 | 1.3.3-1.2 | Jan 27, 2020 | A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prio | ||
| CVE-2018-17957 | — | < 1.3.3-1.2 | 1.3.3-1.2 | Dec 26, 2018 | The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database. |
- CVE-2018-20105Jan 27, 2020affected < 1.3.3-1.2fixed 1.3.3-1.2
A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prio
- CVE-2018-17957Dec 26, 2018affected < 1.3.3-1.2fixed 1.3.3-1.2
The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database.