Advisories · Technology
SUSE Manager Server Module 4.3.
Every CVE that names SUSE Manager Server Module 4.3 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs
- Container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1
- Container suse/manager/5.0/x86_64/proxy-httpd:5.0.5.7.23.1
- CWE-256
- CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint
- Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1
- SUSE Image SLES15-SP4-Manager-Server-4-3-BYOS
- Broken access control
- CVSS 5.6 Medium
Reflected XSS in spacewalk-java
- Container suse/manager/5.0/x86_64/server:5.0.4.7.19.1
- SUSE Manager Server Module 4.3
- Cross-site scripting (XSS)
- CVSS 5.6 Medium
Reflected XSS in SystemsController.java in spacewalk-java
- Container suse/manager/5.0/x86_64/server:5.0.4.7.19.1
- SUSE Manager Server Module 4.3
- Cross-site scripting (XSS)
- CVSS 4.6 Medium
Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web
- Container suse/manager/5.0/x86_64/server:5.0.2.7.8.1
- SUSE Manager Server Module 4.3
- Cross-site scripting (XSS)
- CVSS 4.6 Medium
Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web
- Container suse/manager/5.0/x86_64/server:5.0.2.7.8.1
- SUSE Manager Server Module 4.3
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Insecure handling SSH key in SUSE Manager when bootstrapping new clients
- SUSE Manager Server Module 4.3
- Broken access control