cve.bz

CVE-2018-17957

7.8 highEPSS 0.4%

High (7.8) in suse repository mirroring tool. EPSS 0.4% chance of exploitation in the next 30 days.

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database.

Severity

CVSS 3.0

7.8 high
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWEs
CWE-287, CWE-214
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON