Insecure Storage of Sensitive Information in openSUSE opensuse-welcome
CVE-2023-32184

7.8HIGH

Key Information:

Vendor

openSUSE
Status
opensuse-welcome
Vendor
CVE Published:
19 September 2023

What is CVE-2023-32184?

A vulnerability in the openSUSE opensuse-welcome application allows local attackers to execute arbitrary code as the user running the application. This occurs when a custom layout is selected, leading to insecure storage of sensitive information. Affected versions include opensuse-welcome prior to 0.1.9+git.35.4b9444, which exposes the system to potential unauthorized operations by malicious users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

opensuse-welcome 0.1 < 0.1.9+git.35.4b9444a

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32184

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Matthias Gerstner of SUSE
JSON
.