Approved changes feed: RSS · Atom

cpe:2.3:a:suse:yast2-rmt:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSuse (ec535637-432e-5a38-96dd-4ec1e0138f73)
ProductYast2 Rmt (5a37161c-9462-5b95-be7a-f98e42108d94)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-17957 vulnerable 2026-06-08 05:11:07.035935 yast2-rmt leaks database passwords in process list
LOW (3.4)
The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database.
Published: 2018-12-26T15:00:00.000Z
Updated: 2024-09-16T20:27:58.944Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.