CVE-2018-20105 yast2-rmt exposes CA private key passhrase in log-file

What is CVE-2018-20105?

CVE-2018-20105 is a medium-severity vulnerability in Opensuse Leap, published on 27 Jan 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2. openSUSE Leap yast2-rmt versions prior to 1.2.2.

Weakness: CWE-532

Which versions are affected by CVE-2018-20105?

It affects 3 products.

Products include Opensuse Leap, Suse Suse Linux Enterprise Server, Yast2-Rmt Project Yast2-Rmt.

How do I fix CVE-2018-20105?

Upgrade to a fixed version.

Is CVE-2018-20105 being exploited?

There is no known exploitation of CVE-2018-20105 in the wild and no public exploit code.

Other vulnerabilities in Opensuse Leap

• CVE-2015-4902 Oracle Java SE Integrity Check Exploited Medium 5.3
• CVE-2017-14804 package builds could use directory traversal to write outside of target area Critical 9.9
• CVE-2019-20787 Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size. Critical 9.8
• CVE-2019-8341 Code injection in n/a Critical 9.8
• CVE-2019-6438 Other in n/a Critical 9.8

All Opensuse Leap vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-j4cc-p6fj-6598, SUSE-SU-2019:0629-1, SUSE-SU-2020:0578-1, openSUSE-SU-2019:1089-1, openSUSE-SU-2020:0253-1, openSUSE-SU-2020:0320-1.