← Back

Yast

yast

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Yast Storage
yast-storage
Yast2
yast2

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Yast
1Yast2
May 13, 2026
Sep 8, 2017
N/A· v4
7.8 HIGH· v3
2.1 LOW· v2
The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks.
2Opensuse
Yast
4Leap
LibstorageLibstorage Ng+1 more
May 6, 2026
Sep 26, 2016
N/A· v4
5.1 MEDIUM· v3
1.2 LOW· v2
libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as de...Show more
libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf.Show less