CVE-2017-9271 PUBLISHED

The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.

EPSS 0.11% · 29.0th percentile

Risk Scores

EPSS Score
0.11%
29.0th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTSzypper1.14.42-2, 0
Ubuntu:16.04:LTSzypper1.12.4-1build0.1, 1.12.4-1, 0
Ubuntu:24.04:LTSzypper1.14.68-1build2, 0, 1.14.63-1
Ubuntu:25.10zypper1.14.89-1, 1.14.88-1, 0
Ubuntu:20.04:LTSzypper1.14.11-1build1, 0, 1.14.11-2

Timeline

References

Open in Interactive Console →