CVE-2016-1601

Name of the Vulnerable Software and Affected Versions yast2-users versions prior to 3.1.47

Description The issue is related to the improper setting of empty password fields in /etc/shadow during an AutoYaST installation. This occurs when the profile does not contain inst-sys users, which might allow attackers to have an unspecified impact via unknown vectors.

Recommendations For versions prior to 3.1.47, update to version 3.1.47 or later to resolve the issue.