What is CVE-2022-45154?

CVE-2022-45154 is a medium-severity vulnerability in Opensuse Supportutils, classified under Cleartext Storage of Sensitive Information. CVSS score: 4.4/10. Published 2023-02-15.

How severe is CVE-2022-45154?

Medium severity. CVSS v3 base score is 4.4 out of 10.

Vulnerability in Opensuse Supportutils

CVE-2022-45154

A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 allows attackers that get access to the support logs to ga…

EPSS: 0.002 (7.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L.

Affected products

Opensuse Supportutils
Suse Linux_enterprise_server — versions 12, 15
Suse Linux Enterprise Server 12 — versions supportutils
Suse Linux Enterprise Server 15 — versions supportutils
Suse Linux Enterprise Server 15 Sp3 — versions supportutils

Weakness classification (CWE)

CWE-312 — Cleartext Storage of Sensitive Information

References

meissner@suse.de (Exploit, Issue Tracking)

Frequently asked questions

What is CVE-2022-45154?: CVE-2022-45154 is a medium-severity vulnerability in Opensuse Supportutils, classified under Cleartext Storage of Sensitive Information. CVSS score: 4.4/10. Published 2023-02-15.
How severe is CVE-2022-45154?: Medium severity. CVSS v3 base score is 4.4 out of 10.