CVE-2011-0993 in SUSE Lifecycle Management Server

Summary

SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 02/14/2011
• Disclosure: 04/16/2014
• Moderation: VulDB entry created
• Entries: VDB-69369 (1)
• CPE: ready
• CWE: CWE-264 (Confirmed)
• CVSS: 4.0
• EPSS: 0.00132
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-0993
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-0993
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-0993/