Skip to content

CVE-2017-15918 Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks.

HighCVSS 7.8 EPSS 1.2%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks.

Affected products

ProductAffected versionsFixed in
ignitum sera = 1.2 No fix listed

References

  • m4.rkw.io exploit third-party-advisory
  • 43221 exploit third-party-advisory vdb-entry