Description (CNA)
In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provision, allowing local attackers to read them in the process list
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SUSE / yast2-samba-provision | affected unspecified through 1.0.1 |
CWE
CWE-200
References
ADP enrichment
No English description supplied.