VIR Vulnerability Intelligence Relay

CVE-2012-0421

low
Published 2012-08-08 · Modified 2026-04-29
CVSS v3
—
CVSS v2
2.1
VIR risk
2.1

Description

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00001.html

Application impact
VendorProductVersionsFixed
suse novellsuse_audit_log_keeper{"endIncluding":"0.2.1"}

References

CWEs

CWE-200

Verify integrity in audit chain (admin only). AS-IS.