CVE-2016-5746 — Leap vulnerability

2 documents2 sources

Severity

5.1MEDIUMNVD

EPSS

0.1%

top 81.65%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Opensuse Leap

Timeline

PublishedSep 26

Latest updateMay 14

Description

libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 1.4 | Impact: 3.6

Affected Packages1 packages

▶NVDopensuse/leap42.1

🔴Vulnerability Details

GHSA

GHSA-v7w5-2xfr-963c: libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow↗2022-05-14

▶