QwikSec

Security Database

CVE

CWE

Training

CVE-2013-3713

Published: Jan 11, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

The image creation configuration in aaa_base before 16.26.1 for openSUSE 13.1 KDE adds the root user to the "users" group when installing from a live image, which allows local users to obtain sensitive information and possibly have other unspecified impacts, as demonstrated by reading /etc/shadow.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

openSUSE-SU-2013:1955

vendor-advisory

x_refsource_SUSE

https://bugzilla.novell.com/show_bug.cgi?id=843230

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.