In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifs_set_cifscreds When debug logging is enabled, cifs_set_cifscreds() logs the key payload and exposes the plaintext username and password. Remove the debug log to avoid exposing credentials.
En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: smb: cliente: No registrar credenciales en texto plano en cifs_set_cifscreds Cuando el registro de depuración está habilitado, cifs_set_cifscreds() registra la carga útil de la clave y expone el nombre de usuario y la contraseña en texto plano. Eliminar el registro de depuración para evitar exponer credenciales.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36960d100> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd37038e300> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd31b2453c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd2dbe0ed00> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36960dd00> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36960da40> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd3845fcfc0> | Operating System |
| linux | linux_kernel | 3.3 | <built-in method update of dict object at 0x7fd36a717f40> | Operating System |
| linux | linux_kernel | 3.3 | <built-in method update of dict object at 0x7fd36960ce40> | Operating System |
| linux | linux_kernel | 3.3 | <built-in method update of dict object at 0x7fd36960cdc0> | Operating System |
| linux | linux_kernel | 3.3 | <built-in method update of dict object at 0x7fd36a7145c0> | Operating System |
| linux | linux_kernel | 3.3 | <built-in method update of dict object at 0x7fd36960d400> | Operating System |
| linux | linux_kernel | 3.3 | <built-in method update of dict object at 0x7fd2dbe0d800> | Operating System |
| linux | linux_kernel | 3.3 | <built-in method update of dict object at 0x7fd2dbc76b80> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7fd360669140> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.3:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |