VULNERABILITY INTELLIGENCE
CVE-2018-17957
CVSS score3.4 LOW
EPSS probability0.38%
CISA KEVNot currently listed
Published2018-12-26
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Description
The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database.
Weakness classification
- CWE-214: Invocation of Process Using Visible Sensitive Information
- CWE-287: Improper Authentication