VulnerabilityModified
CVE-2010-3912
The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors.
HIGH 10.0EPSS 2.10%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.10%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 2.10% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-255
- Affected
- novell/suse linux
- Source
- cve@mitre.org
References
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html
- http://osvdb.org/70405
- http://secunia.com/advisories/42877
- http://www.vupen.com/english/advisories/2011/0076
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64690
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html
- http://osvdb.org/70405
- http://secunia.com/advisories/42877
- http://www.vupen.com/english/advisories/2011/0076
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64690
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.