Skip to content
OpenAdvisories
Unscored CVE-2012-0421 EUVD-2012-0453GHSA-77vr-pqgg-3qm9

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keep…

Published Aug 8, 2012 · Updated Sep 16, 2024 · Assigned by mitre

Description

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file.

References