SUSE Manager Server 4.2.10

CPE Details

SUSE Manager Server 4.2.10
suse
manager_server
4.2.10
2022-11-14
13h26 +00:00
2022-11-14
13h28 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:suse:manager_server:4.2.10:*:*:*:*:*:*:*

Informations

Vendor

suse

Product

manager_server

Version

4.2.10

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-22644 2023-09-20 08h12 +00:00 A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE.
9.4
Critical
CVE-2022-31248 2022-06-22 10h05 +00:00 A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1.
5.3
Medium
CVE-2022-21952 2022-06-22 10h05 +00:00 A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.
7.5
High