CVE-2011-0993

Name of the Vulnerable Software and Affected Versions SUSE Lifecycle Management Server versions prior to 1.1

Description The issue allows local users to obtain sensitive information due to world-readable postgres credentials.

Recommendations For SUSE Lifecycle Management Server versions prior to 1.1, restrict access to the postgres credentials to prevent unauthorized reading. Consider modifying the permissions to limit access to sensitive information until a fixed version is available.