CVE-2011-0993

EUVD-2011-1005
SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 32%
Affected Products (NVD)
VendorProductVersion
novellsuse_lifecycle_management_server
𝑥
≤ 1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/95697
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/95697