Skip to content
Sign in
9.8 Critical

CVE-2019-18906 A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager…

Description

A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE Manager Server 4.0 cryptctl versions prior to 2.4.

Affected products and versions

Product Affected versions Fixed in
SUSE Linux Enterprise Server for SAP 12-SP5 2.4 earliest → < 2.4 2.4
SUSE Manager Server 4.0 2.4 earliest → < 2.4 2.4

Other CVEs of SUSE Linux Enterprise Server for SAP 12-SP5

The 2 CVEs of SUSE Linux Enterprise Server for SAP 12-SP5 →
CVE-2022-45153 An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP… 7.0 High
Track this CVE