Lucene search

K
mageiaGentoo FoundationMGASA-2023-0294
HistoryOct 23, 2023 - 12:04 a.m.

Updated shadow-utils packages fix a security vulnerability

2023-10-2300:04:51
Gentoo Foundation
advisories.mageia.org
34
security vulnerability
shadow-utils
password leak
cve-2023-4641
unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

10.3%

The updated packages fix a security vulnerability: Potential password leak. (CVE-2023-4641)

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

10.3%