CWE Code: 522
Vulnerability Type: privilege_escalation
CVSS Score: 2.1
CWE Name:  Insufficiently Protected Credentials
Summary: sera 1.2 stores the user's login password in plain text in their home directory. this makes privilege escalation trivial and also exposes the user and system keychains to local attacks.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2017-11-01
Last Modified Date: 2019-10-03