CVEvulnerability
CVE-2011-3177
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-09-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks.
Affected configurations
• yast yast2
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://bugzilla.suse.com/show_bug.cgi?id=713661 Issue Tracking, Third Party Advisory
- https://github.com/yast/yast-core/commit/7fe2e3df308b8b6a901cb2cfd60f398df53219de Third Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=713661 Issue Tracking, Third Party Advisory
- https://github.com/yast/yast-core/commit/7fe2e3df308b8b6a901cb2cfd60f398df53219de Third Party Advisory