CVE-2016-5746 - CERT CVE
ID CVE-2016-5746
Sažetak libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf.
Reference
CVSS
Base: 1.2
Impact: 2.9
Exploitability:1.9
Pristup
VektorSloženostAutentikacija
LOCAL HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL NONE NONE
CVSS vektor AV:L/AC:H/Au:N/C:P/I:N/A:N
Zadnje važnije ažuriranje 07-11-2023 - 02:33
Objavljeno 26-09-2016 - 15:59