CVE-2012-0425

CVE-2012-0425 describes a critical information disclosure vulnerability in SUSE YaST's yast2-network component, specifically affecting versions prior to 2.24.4. The flaw causes Wi-Fi credentials (WIRELESS_WPA_PASSWORD or WIRELESS_CLIENT_KEY_PASSWORD) to be written in cleartext to the y2log file, allowing unauthorized access to sensitive information. With a CVSS score of 7.8, this vulnerability is highly severe, as it can be exploited remotely with low complexity to achieve complete confidentiality compromise. While no public exploits or active exploitation have been observed, and community discussion is minimal, the potential for data exposure remains a significant concern for affected openSUSE systems.