Skip to content
Sign in
7.3 High

CVE-2018-12472 A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server

Description

A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.

Affected products and versions

Product Affected versions Fixed in
SMT 3.0 earliest → < 3.0.37 3.0.37

Other CVEs of SMT

The 3 CVEs of SMT →
CVE-2018-12470 A SQL Injection in the RegistrationSharing module of SUSE Linux SMT allows remote attackers to cause execute arbitrary… 9.8 Critical CVE-2018-12471 A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server… 6.5 Medium
Track this CVE