{"id":"CVE-2018-20105","aliases":["EUVD-2018-12675","GHSA-j4cc-p6fj-6598","SUSE-SU-2019:0629-1","SUSE-SU-2020:0578-1","openSUSE-SU-2019:1089-1","openSUSE-SU-2020:0253-1","openSUSE-SU-2020:0320-1","openSUSE-SU-2024:11534-1"],"status":"published","title":"yast2-rmt exposes CA private key passhrase in log-file","description":"A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2. openSUSE Leap yast2-rmt versions prior to 1.2.2.","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00425,"percentile":0.37024,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-532"],"published":"2019-03-18T10:20:42Z","modified":"2026-06-17T01:52:17Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"yast2-rmt","fixed_in":["1.2.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"yast2-rmt","fixed_in":["1.3.0-3.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"yast2-rmt","fixed_in":["1.2.2-lp150.2.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"yast2-rmt","fixed_in":["1.2.2-lp151.2.3.1","1.3.0-lp151.2.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"yast2-rmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"yast2-rmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-3.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"yast2-rmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-lp150.2.19.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"yast2-rmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-lp151.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"yast2-rmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-lp151.2.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"yast2-rmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-1.2"}]}],"bundled":2}],"products":[{"vendor":"hcl software","product":"leap"},{"vendor":"opensuse","product":"leap"},{"vendor":"suse","product":"suse linux enterprise server 15"},{"vendor":"suse","product":"suse_linux_enterprise_server"},{"vendor":"yast2-rmt_project","product":"yast2-rmt"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1119835","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00035.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00015.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20105"},{"url":"https://github.com/advisories/GHSA-j4cc-p6fj-6598"},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190629-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1119835","tags":["report"]},{"url":"https://bugzilla.suse.com/1120672","tags":["report"]},{"url":"https://bugzilla.suse.com/1123562","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20105","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200578-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1146403","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3KC2D2OXOHFIVIPHPH4XSND4XTEE3TG5/#3KC2D2OXOHFIVIPHPH4XSND4XTEE3TG5","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZJWCOKDJRYJXO7ORYQPBOYXJ7P756GGF/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JNMQFZYXQABKEKK2ETXJ256Q6N7HKXSA/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17957","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-20105","title":"yast2-rmt exposes CA private key passhrase in log-file","description":"A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2. openSUSE Leap yast2-rmt versions prior to 1.2.2.","status":"published","published":"2020-01-27T08:50:13.036Z","modified":"2024-09-16T23:40:59.234Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:34:59.872731Z"}],"euvd":[{"id":"EUVD-2018-12675","description":"A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2. openSUSE Leap yast2-rmt versions prior to 1.2.2.","status":"published","published":"2020-01-27T08:50:13Z","modified":"2024-09-16T23:40:59Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:54:48.177577Z"}],"ghsa":[{"id":"GHSA-j4cc-p6fj-6598","title":"A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux...","description":"A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2. openSUSE Leap yast2-rmt versions prior to 1.2.2.","status":"published","published":"2022-05-24T17:07:24Z","modified":"2023-01-29T05:01:11Z","updated_at":"2026-11-02T14:44:45.404949Z"}],"nvd":[{"id":"CVE-2018-20105","description":"A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log file. This issue affects: SUSE Linux Enterprise Server 15 yast2-rmt versions prior to 1.2.2. openSUSE Leap yast2-rmt versions prior to 1.2.2.","status":"published","published":"2020-01-27T09:15:11.24Z","modified":"2026-06-17T01:52:17.537Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:05:00.03074Z"}],"osv":[{"id":"openSUSE-SU-2019:1089-1","title":"Security update for yast2-rmt","description":"This update for yast2-rmt to 1.2.2 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-20105: Pass SSL password to Cheetah CLI interface securely (bsc#1119835)\n\nNon-security issues fixed:\n\n- Launch as root from gnome-shell menu (bsc#1123562)\n- Remove broken hyperlink from help (bsc#1120672)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-04-02T05:22:51Z","modified":"2026-02-04T03:35:10.051762Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2020:0253-1","title":"Security update for yast2-rmt","description":"This update for yast2-rmt fixes the following issues:\n\nyast2-rmt was updated to release version 1.2.2:\n\n- CVE-2018-20105: Pass SSL password to Cheetah CLI interface securely (boo#1119835)\n","status":"published","published":"2020-02-27T13:18:38Z","modified":"2026-02-04T02:37:50.962512Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0320-1","title":"Security update for yast2-rmt","description":"This update for yast2-rmt to version 1.3.0 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-20105: Fixed an exposure of the CA private key passphrase in the log file (bsc#1119835).\n\nNon-security issue fixed:\n\n- Add support for forwarding registration data from RMT to SCC\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-03-08T19:12:51Z","modified":"2026-02-04T02:38:31.39326Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11534-1","title":"yast2-rmt-1.3.3-1.2 on GA media","description":"These are all security issues fixed in the yast2-rmt-1.3.3-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:05:43.996131Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:0629-1","title":"Security update for yast2-rmt","description":"This update for yast2-rmt to 1.2.2 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-20105: Pass SSL password to Cheetah CLI interface securely (bsc#1119835)\n\nNon-security issues fixed:\n\n- Launch as root from gnome-shell menu (bsc#1123562)\n- Remove broken hyperlink from help (bsc#1120672)\n","status":"published","published":"2019-03-18T10:20:42Z","modified":"2026-02-04T03:04:31.722941Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2020:0578-1","title":"Security update for yast2-rmt","description":"This update for yast2-rmt to version 1.3.0 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-20105: Fixed an exposure of the CA private key passphrase in the log file (bsc#1119835).\n\nNon-security issue fixed:\n\n- Add support for forwarding registration data from RMT to SCC\n","status":"published","published":"2020-03-03T14:25:47Z","modified":"2026-02-04T03:36:21.628497Z","updated_at":"2026-11-02T15:53:47.06185Z"}]}}