Skip to content
fr Sign in
5.3 Medium

CVE-2022-31248 A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2…

Description

A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1.

Affected products and versions

Product Affected versions Fixed in
SUSE Manager Server 4.1 4.1 earliest → < 4.1.46-1 4.1.46-1
SUSE Manager Server 4.2 4.2 earliest → < 4.2.37-1 4.2.37-1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SUSE Manager Server 4.1

The 3 CVEs of SUSE Manager Server 4.1 →
CVE-2022-31254 A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP… 7.8 High CVE-2022-21952 A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE… 7.5 High
Track this CVE