Yast vulnerabilities
2 vulnerabilities
Known vulnerabilities in Yast products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Yast Storage1 vulnerabilities
- Yast21 vulnerabilities
CVE-2016-5746opensuseleap+12
EPSS score0.50%
libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf.CVE-2011-3177opensuseyast2&distro=openSUSE Tumbleweed+1EPSS score0.31%
The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks.