NVD

Id
42525  
Name
CVE-2012-0425  
Description
LanItems.ycp in save_y2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi credentials to the y2log log file, which allows context-dependent attackers to obtain sensitive information by reading the (1) WIRELESS_WPA_PASSWORD or (2) WIRELESS_CLIENT_KEY_PASSWORD field.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-19  
Published
2013-12-01  
Modified Date
2013-12-02  
Seq
2012-0425  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
214204 42525 CVE-2012-0425 https://bugzilla.novell.com/show_bug.cgi?id=752464  View
214205 42525 CVE-2012-0425 https://support.novell.com/security/cve/CVE-2012-0425.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30376 JVNDB-2012-006084 SUSE YaST の yast2-network における重要な情報を取得される脆弱性 SUSE YaST の yast2-network 内の save_y2logs の LanItems.ycp は、y2log ログファイルに平文の Wi-Fi 認証情報を書き込むため、重要な情報を取得される脆弱性が存在します。 CVE-2012-0425 53663 CVE-2012-0425 42525 7.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006084.html 2012-09-05 2013-12-04 View