Early Access — Mondoo Vulnerability Intelligence is currently in preview.
The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.
Exploitability
AV:LAC:LPR:LUI:NScope
S:UImpact
C:LI:NA:N3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N