CVE-2011-0993

SUSE Lifecycle Management Server < 1.1 - Unauthenticated Sensitive Information Exposure via PostgreSQL Credentials

Title source: llm
STIX 2.1

Description

SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/95697
Vendor Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html

Scores

EPSS 0.0013
EPSS Percentile 32.3%

Details

CWE
CWE-264
Status published
Products (1)
novell/suse_lifecycle_management_server < 1.0
Published Apr 16, 2014
Tracked Since Feb 18, 2026