VDB
CVE-2022-45154
CVE-2022-45154
PUBLISHED
CVSS 4.400000095367432 MEDIUM
A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 allows attackers that get access to the support logs to gain knowledge of the stored credentials This issue affects: SUSE Linux Enterprise Server 12 supportutils version 3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Information and prior versions. SUSE Linux Enterprise Server 15 supportutils version 3.1.21-150000.5.44.1 and prior versions. SUSE Linux Enterprise Server 15 SP3 supportutils version 3.1.21-150300.7.35.15.1 and prior versions.
EPSS 0.17% · 6.7th percentile
Risk Scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
EPSS Score
0.17%
6.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SUSE | SUSE Linux Enterprise Server 15 | * |
| opensuse | supportutils | 0, 0, 0 |
| SUSE | SUSE Linux Enterprise Server 12 | supportutils |
| SUSE | SUSE Linux Enterprise Server 15 SP3 | * |
Timeline
- Feb 15, 2023 CVE Published
- Feb 16, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 28, 2023 EPSS Score
- May 7, 2023 EPSS Score
- Jun 16, 2023 EPSS Score
- Jul 26, 2023 EPSS Score
- Sep 4, 2023 EPSS Score
- Oct 14, 2023 EPSS Score
- Nov 23, 2023 EPSS Score
- Jan 2, 2024 EPSS Score
- Feb 11, 2024 EPSS Score