DeutschShown in its original language — a full translation is planned for a future version.
SUSE Manager: Mehrere Schwachstellen
view advisory published 2022-09-19
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in SUSE Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen, seine Privilegien zu erweitern und einen Denial-of-Service-Zustand zu verursachen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-31129US | high7.5 | — | ||
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Spe… | ||||
| CVE-2021-41411US | critical9.8 | — | ||
drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vul… | ||||
| CVE-2021-43138US | high7.8 | — | ||
In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution… | ||||
| CVE-2021-42740US | critical9.8 | — | ||
The shell-quote package before 1.7.3 for Node.js allows command injection. An attacker can inject unescaped shell metacharacters through a regex designed to support Windows drive l… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update SUSE-SU-2022:3750-1 vom 2022-10-26external
- SUSE Security Update SUSE-SU-2022:3761-1 vom 2022-10-26external
- SUSE Security Advisory vom 2022-09-19external
- SUSE Security Advisory vom 2022-09-19external
- SUSE Security Advisory vom 2022-09-19external
- SUSE Security Update SUSE-SU-2023:0593-1 vom 2023-03-02external
- WID-SEC-W-2022-1476 - CSAF Versionself
- WID-SEC-2022-1476 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan