Security Advisory

CVE-2024-22037

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-11-28 09:46:07
Last updated 2024-11-28 12:15:16
Assigner suse
State PUBLISHED

Description

The uyuni-server-attestation systemd service needs a database_password environment variable. This file has 640 permission, and cannot be shown users, but the environment is still exposed by systemd to non-privileged users.