yast2-rmt exposes CA private key passhrase in log-file
Priority LOW 25CWE-532Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-532.
Summary
A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2. openSUSE Leap yast2-rmt versions prior to 1.2.2.
Why it matters now
EPSS 0.00425 37th percentileScored 2026-11-07
Fix Fixed SUSE Linux Enterprise Server 15 (SUSE): 1.2.2Leap (openSUSE): 1.2.2
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| SUSE | SUSE Linux Enterprise Server 15 | yast2-rmt to before 1.2.2 | 1.2.2 | Patch available | CNA |
| openSUSE | Leap | yast2-rmt to before 1.2.2 | 1.2.2 | Patch available | CNA |
- SUSE Linux Enterprise Server 15 VendorSUSE Affected yast2-rmt to before 1.2.2 Fixed in 1.2.2 Patch available CNA
- Leap VendoropenSUSE Affected yast2-rmt to before 1.2.2 Fixed in 1.2.2 Patch available CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:yast2-rmt_project:yast2-rmt:*:*:*:*:*:*:*:* | before 1.2.2 | Vulnerable | Yast2-rmt Project |
| cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* | 15.0 | Vulnerable | openSUSE |
| cpe:2.3:o:suse:suse_linux_enterprise_server:15:*:*:*:*:*:*:* | 15 | Vulnerable | SUSE |
- cpe:2.3:a:yast2-rmt_project:yast2-rmt:*:*:*:*:*:*:*:* Versions before 1.2.2 Vulnerable ·Yast2-rmt Project
- cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* Versions 15.0 Vulnerable ·openSUSE
- cpe:2.3:o:suse:suse_linux_enterprise_server:15:*:*:*:*:*:*:* Versions 15 Vulnerable ·SUSE
Remediation
- Fix · CNA SUSE Linux Enterprise Server 15 (SUSE) Fixed in 1.2.2
- Fix · CNA Leap (openSUSE) Fixed in 1.2.2
Timeline
- 2026-10-02 Threatist record created from CVE-2018-20105
- 2026-10-03 Alias added: GHSA-j4cc-p6fj-6598
References
More Suse Linux Enterprise Server vulnerabilities
- TI-2016-03144 The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT… KEVCVSS 3.1HIGH 8.4
- TI-2014-01166 Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and… CVSS 3.1CRITICAL 9.8
- TI-2014-01165 The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4… CVSS 3.1CRITICAL 9.8
- TI-2014-00189 The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does… KEVCVSS 3.1MEDIUM 5.5
- TI-2015-06274 Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the… CVSS 3.0HIGH 8.1
- TI-2017-03716 Observable discrepancy in Intel Most Modern Operating Systems CVSS 3.1MEDIUM 5.6
Sources
- CVE-2018-20105 · CVE Program
- CVE-2018-20105 · NVD
- FIRST EPSS
- GHSA-j4cc-p6fj-6598 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences