CVE-2019-3684

Published: May 13, 2019Modified: Jun 17, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem

Affected (1)

Products: Suse: Manager

Suse

1 product

Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Suse Manager	Up to 4.0.7

Related CWEs

CWE-922

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (2)

https://bugzilla.suse.com/show_bug.cgi?id=1131954

Source: meissner@suse.de

ExploitIssue TrackingVendor Advisory

https://bugzilla.suse.com/show_bug.cgi?id=1131954

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingVendor Advisory

Timeline

No history available yet.