← back
CVE-2017-15918

CVE-2017-15918

EPSS 1.2%
Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/43221/unverifiedexploitdbwww.exploit-db.com/exploits/43221unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://m4.rkw.io/blog/cve201715918-sera-12-local-root-privesc-and-password-disclosure.htmlhttps://www.exploit-db.com/exploits/43221/