SUSE Lifecycle Management Server before 1.1 uses world readable postgres credentials, which allows local users to obtain sensitive information via unspecified vectors.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Suse_lifecycle_management_server |
Novell |
* |
1.0 (including) |
References