software-actualizer vulnerabilities
1 known vulnerability in software-actualizer from ChewKeanHo. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.9average CVSS score
Latest first
- 7.9 High severity
software-actualizer: Unchecked Return Value
(Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh. The installer invokes mkpasswd to generate yescrypt password hash