CVE-2024-22037 — Database password leaked by systemd uyuni-server-attestation service
The uyuni-server-attestation systemd service needs a database_password environment variable. This file has 640 permission, and cannot be shown users, but the environment is stil…
Published: 2024-11-28 · CVSS: 5.7 · CVSS 4.0
The uyuni-server-attestation systemd service needs a database_password environment variable. This file has 640 permission, and cannot be shown users, but the environment is still exposed by systemd to non-privileged users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7