Suse Audit Log Keeper
Monthly
The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. No vendor patch available.
The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. No vendor patch available.