CVE-2018-17956

In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provision, allowing local attackers to read them in the process list

Score

CVSS 3.1 7.8 High

Status

Modified - security@opentext.com

Published

2019-03-15

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Yast2-samba-provision (Opensuse)
• Yast2-samba-provision (Suse)

References

• https://bugzilla.suse.com/show_bug.cgi?id=1117597