CVE-2012-0425 | BDVDB-2026-58661 Detail

Description#

LanItems.ycp in save_y2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi credentials to the y2log log file, which allows context-dependent attackers to obtain sensitive information by reading the (1) WIRELESS_WPA_PASSWORD or (2) WIRELESS_CLIENT_KEY_PASSWORD field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://support.novell.com/security/cve/CVE-2012-0425.html
https://bugzilla.novell.com/show_bug.cgi?id=752464

Exploit#

No public exploit known

History#

Version 12013-12-02Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.