CVE-2018-17957

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-214 CWE-287

Affected software

No affected versions have been published.

Timeline

Published: Dec 26, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-179587.5Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.CVE-2018-17967.8IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and gain root privileges. IBM X-For CVE-2018-179606.1CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste.CVE-2018-179618.6Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOT CVE-2018-179627.5Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.CVE-2018-179639.8qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service CVE-2018-179646.1Aryanic HighPortal 12.5 has XSS via an Add Tags action.CVE-2018-179656.5ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c.CVE-2018-179666.5ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c.CVE-2018-179676.5ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c.CVE-2018-179687.5A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an extern CVE-2018-179699.8Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via iso.3.6.1.4.1.236.11.5.11.81.