CVE Daily

CVE-2013-3713

The image creation configuration in aaa_base before 16.26.1 for openSUSE 13.1 KD...

Medium CVSS 4.4

Overview

The image creation configuration in aaa_base before 16.26.1 for openSUSE 13.1 KDE adds the root user to the "users" group when installing from a live image, which allows local users to obtain sensitive information and possibly have other unspecified impacts, as demonstrated by reading /etc/shadow.

CWE: CWE-200 Published: 2014-01-11T01:55:02.987
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.4 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags