CVE-2015-5969

MEDIUM Year: 2015
CVSS v3 Score
6.2
Medium
CVSS v2 Score
2.1
Low
Weakness Type
CWE-200
View all →

Vulnerability Description

The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package before 10.0.22-2.21.2 in openSUSE 13.2 and before 10.0.22-3.1 in SUSE Linux Enterprise (SLE) 12.1 and openSUSE Leap 42.1 allows local users to discover database credentials by listing a process and its arguments.

Related Vulnerabilities

CVE-2015-1776

MEDIUM
CVSS:6.2(Medium)

Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data encryption feature is e...

CWE-2002015

CVE-2016-0321

MEDIUM
CVSS:6.2(Medium)

IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging access...

CWE-2002016

CVE-2016-0338

MEDIUM
CVSS:6.2(Medium)

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows local users to discover cleartext passwords by (1) reading a configuration file or (2)...

CWE-2002016

CVE-2016-3059

MEDIUM
CVSS:6.2(Medium)

IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (aka IBM Spectrum Protect for Databases) 6.3 before 6.3.1.7 and 6.4 before 6.4.1.9 and Tivoli Storage FlashCopy Manag...

CWE-2002016

CVE-2016-4482

MEDIUM
CVSS:6.2(Medium)

The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from ke...

CWE-2002016

CVE-2016-6092

MEDIUM
CVSS:6.2(Medium)

IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user.

CWE-2002016