CVE-2017-15112

Description

keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.051

Associated Vulnerability

Vulnerability	OS Platform
Keycloak-httpd-client-install update (ELSA-2019-2137) keycloak-httpd-client-install-0.8-1.el7.noarch.rpm	Linux
Python2-keycloak-httpd-client-install update (ELSA-2019-2137) python2-keycloak-httpd-client-install-0.8-1.el7.noarch.rpm	Linux
keycloak-httpd-client-install Security Update (ALAS-2019-1324) keycloak-httpd-client-install-0.8-1.amzn2.noarch.rpm	Linux
keycloak-httpd-client-install Security Update (ALAS-2019-1324) python2-keycloak-httpd-client-install-0.8-1.amzn2.noarch.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234