CVE-2022-45154
Estado: ModificadaMedia (5.5)—
A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 allows attackers that get access to the support logs to gain knowledge of the stored credentials This issue affects: SUSE Linux Enterprise Server 12 supportutils version 3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Information and prior versions. SUSE Linux Enterprise Server 15 supportutils version 3.1.21-150000.5.44.1 and prior versions. SUSE Linux Enterprise Server 15 SP3 supportutils version 3.1.21-150300.7.35.15.1 and prior versions.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 5.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.17%
- Percentil entre todas las CVEs puntuadas: 6
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-312
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2022-45154",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2022-45154",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2025-03-18T19:24:29.999217Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "meissner@suse.de",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.4,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "LOW",
"confidentialityImpact": "LOW"
},
"impactScore": 2.5,
"exploitabilityScore": 1.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.5,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "meissner@suse.de",
"affectedData": [
{
"vendor": "SUSE",
"product": "SUSE Linux Enterprise Server 12",
"versions": [
{
"status": "affected",
"version": "supportutils",
"versionType": "custom",
"lessThanOrEqual": "3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Information"
}
]
},
{
"vendor": "SUSE",
"product": "SUSE Linux Enterprise Server 15",
"versions": [
{
"status": "affected",
"version": "supportutils",
"versionType": "custom",
"lessThanOrEqual": "3.1.21-150000.5.44.1"
}
]
},
{
"vendor": "SUSE",
"product": "SUSE Linux Enterprise Server 15 SP3",
"versions": [
{
"status": "affected",
"version": "supportutils",
"versionType": "custom",
"lessThanOrEqual": "3.1.21-150300.7.35.15.1"
}
]
}
]
}
],
"published": "2023-02-15T10:15:17.377",
"references": [
{
"url": "https://bugzilla.suse.com/show_bug.cgi?id=1207598",
"tags": [
"Exploit",
"Issue Tracking"
],
"source": "meissner@suse.de"
},
{
"url": "https://bugzilla.suse.com/show_bug.cgi?id=1207598",
"tags": [
"Exploit",
"Issue Tracking"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "meissner@suse.de",
"description": [
{
"lang": "en",
"value": "CWE-312"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 allows attackers that get access to the support logs to gain knowledge of the stored credentials This issue affects: SUSE Linux Enterprise Server 12 supportutils version 3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Information and prior versions. SUSE Linux Enterprise Server 15 supportutils version 3.1.21-150000.5.44.1 and prior versions. SUSE Linux Enterprise Server 15 SP3 supportutils version 3.1.21-150300.7.35.15.1 and prior versions."
},
{
"lang": "es",
"value": "Una vulnerabilidad de almacenamiento de texto plano de información confidencial en las utilidades de soporte de SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 permite a los atacantes que obtienen acceso a los registros de soporte obtener conocimiento de las credenciales almacenadas. Este problema afecta a: SUSE Linux Enterprise Server 12 supportutils versión 3.0.10-95.51.1CWE-312: almacenamiento de texto plano de información confidencial y versiones anteriores. SUSE Linux Enterprise Server 15 supportutils versión 3.1.21-150000.5.44.1 y versiones anteriores. SUSE Linux Enterprise Server 15 SP3 supportutils versión 3.1.21-150300.7.35.15.1 y versiones anteriores."
}
],
"lastModified": "2026-06-17T05:09:29.487",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:opensuse:supportutils:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CA61E84-D366-4E82-A0F2-B26445610EB6",
"versionEndIncluding": "3.0.10-95.51.1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "15FC9014-BD85-4382-9D04-C0703E901D7A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:opensuse:supportutils:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CA4BD70-03B8-4CBD-8532-C75BC77F3722",
"versionEndIncluding": "3.1.21-150000.5.44.1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_server:15:-:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0BB4DDAB-D900-4EC0-99E8-1D6AB48F6D20"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:opensuse:supportutils:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02F152EA-2162-4750-9A40-01BAD9FAF936",
"versionEndIncluding": "3.1.21-150300.7.35.15.1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_server:15:sp3:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6C2EACE6-C127-4B13-8002-8EEBEE8D549B"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "meissner@suse.de"
}