CVE-2017-15918 | BDVDB-2026-92502 Detail

Description#

Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://m4.rkw.io/blog/cve201715918-sera-12-local-root-privesc-and-password-disclosure.html
https://www.exploit-db.com/exploits/43221/

Exploit#

https://www.exploit-db.com/exploits/43221/

History#

Version 12017-11-01Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.