CVE-2015-5969: opensuse leap
Vulnerability summary
CVE-2015-5969 is a medium (CVSS 6.2) vulnerability in opensuse leap. EPSS estimates a 0.39% chance of exploitation in the next 30 days, higher than 31.5% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 4 · Related 4Timeline
- 08-04-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package before 10.0.22-2.21.2 in openSUSE 13.2 and before 10.0.22-3.1 in SUSE Linux Enterprise (SLE) 12.1 and openSUSE Leap 42.1 allows local users to discover database credentials by listing a process and its arguments.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.39%
Chance of exploitation in the next 30 days
Percentile
32%
Versus all other CVEs
30-day change
0.00 pp
From 0.39% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Suse4 products
2 vendors · 6 products
References
5 links- www.suse.com/support/update/announcement/2016/suse-su-20160296-1.htmlVendor AdvisoryX Refsource SUSE
- bugzilla.suse.com/957174X Refsource CONFIRM