What’s Vulnerable › Vulnerabilities

CVE-2012-0421

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-08-08 · updated 2026-06-16
• Weakness: CWE-200

Description

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file.

Affected products

• Novell Suse Audit Log Keeper: through 0.2.1

References

• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00001.html
• https://bugzilla.novell.com/771335
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00001.html
• https://bugzilla.novell.com/771335

Get alerted when CVE-2012-0421 or the next vulnerability affects your stack