Skip to content
Sign in
7.5 High

CVE-2022-21952 A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE…

Description

A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.

Affected products and versions

Product Affected versions Fixed in
SUSE Manager Server 4.1 4.1 earliest → < 4.1.46 4.1.46
SUSE Manager Server 4.2 4.2 earliest → < 4.2.37 4.2.37

Other CVEs of SUSE Manager Server 4.1

The 3 CVEs of SUSE Manager Server 4.1 →
CVE-2022-31254 A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP… 7.8 High CVE-2022-31248 A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2… 5.3 Medium
Track this CVE