SUSE update for Security Beta update for SUSE Manager Client Tools and Salt
Security Bulletin
This security bulletin contains information about 44 vulnerabilities.
1) Incorrect Regular Expression
EUVDB-ID: #VU65355
Risk: Medium
CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]
CVE-ID: CVE-2020-7753
CWE-ID:
CWE-185 - Incorrect Regular Expression
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient input validation when processing regular expressions. A remote attacker can pass specially crafted data to the application and perform regular expression denial of service (ReDos) attack.
Update the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Inclusion of Sensitive Information in Log Files
EUVDB-ID: #VU50428
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-20178
CWE-ID:
CWE-532 - Information Exposure Through Log Files
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to the snmp_facts module in Ansible discloses 'authkey' and 'privkey' credentials. A local user with access to the output of playbook execution can obtain SNMP credentials.
Update the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Inclusion of Sensitive Information in Log Files
EUVDB-ID: #VU50429
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-20180
CWE-ID:
CWE-532 - Information Exposure Through Log Files
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to the bitbucket_pipeline_variable module in ansible-collection discloses by default credentials in the console log. A local user can obtain bitbucket_pipeline credentials.
Update the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Inclusion of Sensitive Information in Log Files
EUVDB-ID: #VU50936
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-20191
CWE-ID:
CWE-532 - Information Exposure Through Log Files
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to software stores sensitive information into log files. A local user can read the log files and gain access to sensitive data.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Inclusion of Sensitive Information in Log Files
EUVDB-ID: #VU50818
Risk: Low
CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-20228
CWE-ID:
CWE-532 - Information Exposure Through Log Files
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to software stores sensitive information into log files in the Ansible Engine|. A local user can read the log files and gain access to sensitive data.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
6) Inclusion of Sensitive Information in Log Files
EUVDB-ID: #VU52984
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-3447
CWE-ID:
CWE-532 - Information Exposure Through Log Files
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to software stores sensitive information into log files. A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the no_log feature. A local user can read the log files and gain access to sensitive data.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
7) Code Injection
EUVDB-ID: #VU54626
Risk: High
CVSSv3.1: 7.1 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-3583
CWE-ID:
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to improper input validation when processing yaml multi-line strings with ansible facts in templates. A remote attacker can trick the victim to open a specially crafted yaml template and execute arbitrary commands on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
8) Information Exposure Through an Error Message
EUVDB-ID: #VU57422
Risk: Low
CVSSv3.1: 3.2 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-3620
CWE-ID:
CWE-209 - Information Exposure Through an Error Message
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists in the Ansible Engine's ansible-connection module. The Ansible user credentials is disclosed by default in the traceback error message. A remote attacker with ability to intercept traffic can obtain user's credentials.
Update the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
9) NULL pointer dereference
EUVDB-ID: #VU55287
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-36222
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5). A remote attacker can send a request containing a PA-ENCRYPTED-CHALLENGE padata element without using FAST and perform a denial of service (DoS) attack.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
10) Buffer overflow
EUVDB-ID: #VU56063
Risk: High
CVSSv3.1: 8.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-3711
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in EVP_PKEY_decrypt() function within implementation of the SM2 decryption. A remote attacker can send specially crafted SM2 content for decryption to trigger a buffer overflow by 62 bytes and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
11) Input validation error
EUVDB-ID: #VU57967
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-3807
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input when matching crafted invalid ANSI escape codes in ansi-regex. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
12) Code Injection
EUVDB-ID: #VU64034
Risk: High
CVSSv3.1: 8.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-3918
CWE-ID:
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Exploit availability: No
DescriptionThe disclosed vulnerability allows a remote attacker to execute arbitrary code on the system.
The vulnerability exists due to insufficient sanitization of user-supplied data during the validation of a JSON object. A remote attacker can pass a specially crafted JSON file for validation and execute arbitrary code.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
13) Cross-site scripting
EUVDB-ID: #VU57926
Risk: Low
CVSSv3.1: 5.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C]
CVE-ID: CVE-2021-41174
CWE-ID:
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Exploit availability: Yes
DescriptionThe disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.
The vulnerability exists due to insufficient sanitization of user-supplied data. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
14) Incorrect authorization
EUVDB-ID: #VU64430
Risk: Medium
CVSSv3.1: 7.9 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-41244
CWE-ID:
CWE-863 - Incorrect Authorization
Exploit availability: No
DescriptionThe vulnerability allows a remote user to execute arbitrary code on the target system.
The vulnerability exists due to improper access control in fine-grained access control feature. A remote user with an admin role in one organization can list, add, remove, and update users’ roles in other organizations in which he is not an admin.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
15) Prototype pollution
EUVDB-ID: #VU62361
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-43138
CWE-ID:
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to escalate privileges within the application.
The vulnerability exists due to improper input validation when handling data passed via the mapValues() method. A remote attacker can send a specially crafted request and escalate privileges within the application.
Update the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
16) Path traversal
EUVDB-ID: #VU58647
Risk: High
CVSSv3.1: 7.2 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C]
CVE-ID: CVE-2021-43798
CWE-ID:
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to perform directory traversal attacks.
The vulnerability exists due to input validation error when processing directory traversal sequences, passed after the "/public/plugins/" URL. A remote non-authenticated attacker can send a specially crafted HTTP request and read arbitrary files on the system.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
Yes. This vulnerability is being exploited in the wild.
17) Path traversal
EUVDB-ID: #VU64273
Risk: Low
CVSSv3.1: 3.8 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-43813
CWE-ID:
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform directory traversal attacks.
The vulnerability exists due to input validation error when processing directory traversal sequences. A remote attacker can send a specially crafted HTTP request and read arbitrary files on the system.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
18) Path traversal
EUVDB-ID: #VU64404
Risk: Low
CVSSv3.1: 3.8 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-43815
CWE-ID:
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform directory traversal attacks.
The vulnerability exists due to input validation error when processing .csv files. A remote user can send a specially crafted HTTP request and read arbitrary files on the system.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
19) Information disclosure
EUVDB-ID: #VU61669
Risk: Low
CVSSv3.1: 3.2 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-0155
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output by the application. A remote attacker can gain unauthorized access to sensitive information on the system.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
20) Stored cross-site scripting
EUVDB-ID: #VU71567
Risk: Low
CVSSv3.1: 4.2 [CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-23552
CWE-ID:
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Exploit availability: No
DescriptionThe disclosed vulnerability allows a remote user to perform cross-site scripting (XSS) attacks.
The vulnerability exists due to insufficient sanitization of user-supplied data. A remote user with the Editor role can inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
21) Input validation error
EUVDB-ID: #VU67396
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-27664
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
22) Input validation error
EUVDB-ID: #VU63461
Risk: Low
CVSSv3.1: 3.8 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-29170
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to insufficient validation of user-supplied input when processing HTTP Host header during redirection. A remote attacker can perform spoofing attack.
Update the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
23) Stored cross-site scripting
EUVDB-ID: #VU65354
Risk: Low
CVSSv3.1: 4.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-31097
CWE-ID:
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Exploit availability: No
DescriptionThe disclosed vulnerability allows a remote user to perform cross-site scripting (XSS) attacks.
The vulnerability exists due to insufficient sanitization of user-supplied data. A remote user can inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
24) Improper Authentication
EUVDB-ID: #VU65353
Risk: High
CVSSv3.1: 8.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-31107
CWE-ID:
CWE-287 - Improper Authentication
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to bypass authentication process.
The vulnerability exists due to an error in OAuth implementation routine. A remote attacker can bypass authentication process and login under arbitrary account.
Update the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
25) Improper Verification of Cryptographic Signature
EUVDB-ID: #VU72128
Risk: Medium
CVSSv3.1: 5.9 [CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-31123
CWE-ID:
CWE-347 - Improper Verification of Cryptographic Signature
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to compromise the affected instance.
The vulnerability exists due to missing signature verification mechanism. A remote attacker can trick the server admin into installing a malicious plugin even though unsigned plugins are not allowed.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
26) Information disclosure
EUVDB-ID: #VU72130
Risk: Medium
CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-31130
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a remote user to gain access to potentially sensitive information.
The vulnerability exists due to the GitLab data source plugin leaks the API key to GitLab. A remote privileged user can expose Grafana authentication token to a third-party.
Update the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
27) Resource exhaustion
EUVDB-ID: #VU68897
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-32149
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to ParseAcceptLanguage does not properly control consumption of internal resources. A remote attacker can send a specially crafted Accept-Language header that will take a significant time to parse and perform a denial of service (DoS) attack.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
28) Authentication bypass using an alternate path or channel
EUVDB-ID: #VU68557
Risk: Low
CVSSv3.1: 6.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-35957
CWE-ID:
CWE-288 - Authentication Bypass Using an Alternate Path or Channel
Exploit availability: No
DescriptionThe vulnerability allows a remote user to escalate privileges within the application.
The vulnerability exists due to the way Grafana handles authorization process when Auth proxy authentication is used. A remote user with admin privileges can authenticate as Server Admin by providing the username (or email) in a X-WEBAUTH-USER HTTP header.
Update the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
29) Permissions, Privileges, and Access Controls
EUVDB-ID: #VU67646
Risk: Medium
CVSSv3.1: 5.6 [CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-36062
CWE-ID:
CWE-264 - Permissions, Privileges, and Access Controls
Exploit availability: No
DescriptionThe vulnerability allows a remote user to escalate privileges on the system.
The vulnerability exists due to application does not properly impose security restrictions, which leads to security restrictions bypass and privilege escalation.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
30) Information disclosure
EUVDB-ID: #VU72131
Risk: Medium
CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-39201
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a remote user to gain access to potentially sensitive information.
The vulnerability exists due to Grafana leaks the authentication cookie of users to plugins. A remote user can gain unauthorized access to sensitive information.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
31) Improper Authentication
EUVDB-ID: #VU72132
Risk: Low
CVSSv3.1: 3.8 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-39229
CWE-ID:
CWE-287 - Improper Authentication
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to deny access to the application.
The vulnerability exists due to a logic error in the authentication process, where application allows usage of the same email address by different accounts. A remote user can set an existing email address that belongs to another user as their username and prevent that user from accessing the application.
Update the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
32) Input validation error
EUVDB-ID: #VU69484
Risk: Medium
CVSSv3.1: 5.6 [CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-39306
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to insufficient validation of user-supplied input. A remote user can use the invitation link to sign up with an arbitrary username/email with a malicious intent.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
33) Information disclosure
EUVDB-ID: #VU69485
Risk: Medium
CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-39307
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output by the application when using the forget password on the login page. A remote attacker can gain unauthorized access to sensitive information on the system.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
34) Spoofing attack
EUVDB-ID: #VU71566
Risk: Low
CVSSv3.1: 2.7 [CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-39324
CWE-ID:
CWE-451 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to usage of a hidden originalUrl parameter in the shared dashboard. A remote attacker can trick the victim into opening a shared snapshot and click on the button in the Grafana web UI, which will redirect user to an attacker-controlled URL.
Update the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
35) Resource exhaustion
EUVDB-ID: #VU68390
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-41715
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources in regexp/syntax when handling regular expressions. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
36) Resource exhaustion
EUVDB-ID: #VU72686
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-41723
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources in the HPACK decoder. A remote attacker can send a specially crafted HTTP/2 stream to the application, cause resource exhaustion and perform a denial of service (DoS) attack.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
37) Use of Password Hash Instead of Password for Authentication
EUVDB-ID: #VU69691
Risk: Low
CVSSv3.1: 4.2 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-46146
CWE-ID:
CWE-836 - Use of Password Hash Instead of Password for Authentication
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to bypass authentication process.
The vulnerability exists due to incorrect implementation of basic authentication. A remote attacker with knowledge of the password hash can authenticate against Prometheus without actual knowledge of the password.
Update the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
38) Stored cross-site scripting
EUVDB-ID: #VU75358
Risk: Low
CVSSv3.1: 4.2 [CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-0507
CWE-ID:
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Exploit availability: No
DescriptionThe disclosed vulnerability allows a remote user to perform cross-site scripting (XSS) attacks.
The vulnerability exists due to insufficient sanitization of user-supplied data within the GeoMap plugin. A remote user with the Editor role can permanently inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
39) Stored cross-site scripting
EUVDB-ID: #VU75359
Risk: Low
CVSSv3.1: 4.2 [CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-0594
CWE-ID:
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Exploit availability: No
DescriptionThe disclosed vulnerability allows a remote user to perform cross-site scripting (XSS) attacks.
The vulnerability exists due to insufficient sanitization of user-supplied data in the trace view visualization. A remote user the Editor role can permanently inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
40) Information disclosure
EUVDB-ID: #VU77620
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-1387
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to application allows users to login with a JWT token passed in the URL query parameter auth_token. A remote attacker can intercept the query and gain unauthorized access to the application.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
41) Stored cross-site scripting
EUVDB-ID: #VU75360
Risk: Low
CVSSv3.1: 4.2 [CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-1410
CWE-ID:
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Exploit availability: No
DescriptionThe disclosed vulnerability allows a remote user to perform cross-site scripting (XSS) attacks.
The vulnerability exists due to insufficient sanitization of user-supplied data in the Graphite FunctionDescription tooltip. A remote user can permanently inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
42) Missing Authorization
EUVDB-ID: #VU78470
Risk: Low
CVSSv3.1: 3.8 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-2183
CWE-ID:
CWE-862 - Missing Authorization
Exploit availability: No
DescriptionThe vulnerability allows a remote user to bypass implemented security restrictions.
The vulnerability exists due to missing authorization in the alerts feature within API. A remote user can use the API to send multiple alert messages to e-mail and Slack, spamming users, prepare Phishing attack or block SMTP server.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
43) Improper synchronization
EUVDB-ID: #VU77623
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-2801
CWE-ID:
CWE-662 - Improper Synchronization
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to incorrect synchronization when processing multiple requests. A remote user can query multiple distinct data sources using mixed queries via public dashboard or API and crash Grafana instances.
MitigationUpdate the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
44) Improper Authentication
EUVDB-ID: #VU77652
Risk: High
CVSSv3.1: 7.9 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-3128
CWE-ID:
CWE-287 - Improper Authentication
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to bypass authentication process.
The vulnerability exists due to an error in Azure AD OAuth implementation. Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. A remote attacker can modify their profile and provide the email address of an existing Grafana user, bypass authentication process and gain unauthorized access to the application.
The vulnerability affects Grafana installations with Azure AD OAuth configured for a multi-tenant app.
Update the affected package Security Beta update for SUSE Manager Client Tools and Salt to the latest version.
Vulnerable software versionsSUSE Manager Client Tools Beta for SLE Micro: 5
SUSE Manager Client Tools Beta for SLE: 15
SUSE Linux Enterprise Micro: 5.0 - 5.5
SUSE Linux Enterprise Server for SAP Applications 15: SP1 - SP5
SUSE Linux Enterprise Server 15: SP1 - SP5
SUSE Linux Enterprise Real Time 15: SP1 - SP5
SUSE Linux Enterprise High Performance Computing 15: SP1 - SP5
SUSE Linux Enterprise Desktop 15: SP1 - SP5
SUSE Linux Enterprise Desktop: 15-SP1
SUSE Linux Enterprise Server: 15-SP3-LTSS
SUSE Linux Enterprise High Performance Computing: 15-SP3-LTSS
openSUSE Leap: 15.3 - 15.5
SUSE Linux Enterprise Server for SAP Applications: 15
golang-github-prometheus-prometheus: before 2.45.0-159000.6.33.1
golang-github-lusitaniae-apache_exporter-debuginfo: before 1.0.0-159000.4.12.1
python3-uyuni-common-libs: before 5.0.1-159000.3.33.1
golang-github-boynux-squid_exporter-debuginfo: before 1.6-159000.4.9.1
golang-github-lusitaniae-apache_exporter: before 1.0.0-159000.4.12.1
prometheus-postgres_exporter: before 0.10.1-159000.3.6.1
grafana-debuginfo: before 9.5.8-159000.4.24.1
grafana: before 9.5.8-159000.4.24.1
golang-github-boynux-squid_exporter: before 1.6-159000.4.9.1
firewalld-prometheus-config: before 0.1-159000.6.33.1
python3-hwdata: before 2.3.5-159000.5.13.1
python3-spacewalk-client-tools: before 5.0.1-159000.6.48.1
python3-spacewalk-client-setup: before 5.0.1-159000.6.48.1
supportutils-plugin-susemanager-client: before 5.0.1-159000.6.15.1
spacewalk-client-setup: before 5.0.1-159000.6.48.1
python3-mgr-push: before 5.0.1-159000.4.21.1
supportutils-plugin-salt: before 1.2.2-159000.5.9.1
mgr-push: before 5.0.1-159000.4.21.1
spacecmd: before 5.0.1-159000.6.42.1
python3-spacewalk-check: before 5.0.1-159000.6.48.1
ansible: before 2.9.27-159000.3.9.1
ansible-doc: before 2.9.27-159000.3.9.1
python3-rhnlib: before 5.0.1-159000.6.30.1
spacewalk-check: before 5.0.1-159000.6.48.1
python3-pyvmomi: before 6.7.3-159000.3.6.1
spacewalk-client-tools: before 5.0.1-159000.6.48.1
prometheus-blackbox_exporter: before 0.24.0-159000.3.6.1
golang-github-QubitProducts-exporter_exporter: before 0.4.0-159000.4.6.1
dracut-saltboot: before 0.1.1681904360.84ef141-159000.3.30.1
uyuni-proxy-systemd-services: before 5.0.1-159000.3.9.1
External linkshttp://www.suse.com/support/update/announcement/2024/suse-su-20240196-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
