VULNERABILITY INTELLIGENCE
CVE-2017-15918
CVSS score7.8 HIGH
EPSS probability1.15%
CISA KEVNot currently listed
Published2017-11-01
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks.
Weakness classification
- CWE-522: Insufficiently Protected Credentials
Primary references
- cve@mitre.org — Exploit, Third Party Advisory
- cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry