CVE-2017-9271

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published
Mar 1, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-92727.5The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service attack.CVE-2017-92735.3The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes.CVE-2017-92747.8A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPECVE-2017-92756.1NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack.CVE-2017-92766.1Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be reflected back into thCVE-2017-92777.5The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections withoutCVE-2017-92789.8The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosCVE-2017-92797.2NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the UserCVE-2017-92807.5Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potentially allowing exposuCVE-2017-92817.5An integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability in Micro Focus VisiBroker 8.5 can lead to a CVE-2017-92829.8An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus ViCVE-2017-92839.8An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for fur
CVE-2017-9271: Low severity, CVSS 3.3 | Vulnix