9.8
Critique
CVE-2019-18906 A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager…
Description
A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE Manager Server 4.0 cryptctl versions prior to 2.4.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise Server for SAP 12-SP5 2.4 | premières → < 2.4 | 2.4 |
| SUSE Manager Server 4.0 2.4 | premières → < 2.4 | 2.4 |