What’s Vulnerable › Vulnerabilities

CVE-2017-15918

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-11-01 · updated 2026-06-17
• Weakness: CWE-522

Description

Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks.

Affected products

• Ignitum Sera: 1.2

References

• https://m4.rkw.io/blog/cve201715918-sera-12-local-root-privesc-and-password-disclosure.html
• https://www.exploit-db.com/exploits/43221/
• https://m4.rkw.io/blog/cve201715918-sera-12-local-root-privesc-and-password-disclosure.html
• https://www.exploit-db.com/exploits/43221/

Get alerted when CVE-2017-15918 or the next vulnerability affects your stack