PT-2018-1940 · Suse · Suse Linux Smt+1

Ebx + 2 · Publicado 2018-08-07 · Atualizado 2019-10-09 · CVE-2018-12472

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions SUSE Linux SMT versions prior to 3.0.37

Description The issue is related to insufficient authentication procedure using the HOST header in SUSE Linux Subscription Management Tool (SMT), allowing a remote attacker to spoof a server.

Recommendations For versions prior to 3.0.37, update to version 3.0.37 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

BDU:2018-01547

CVE-2018-12472

SUSE-SU-2018:2898-1

SUSE-SU-2018:2898-2

SUSE-SU-2018:2899-1

SUSE-SU-2018:3467-1

SUSE-SU-2018:3467-2

SUSE-SU-2018_3467-1

SUSE-SU-2018_3467-2

Produtos afetados

Suse Linux Smt

Suse

Referências · 30

• https://bugzilla.suse.com/1097824 · Nota
• https://suse.com/security/cve/CVE-2018-12471 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2018:3467-2 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-12472 · Nota
• https://bugzilla.suse.com/1111056 · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=1104076 · Nota
• https://bugzilla.suse.com/1074608 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2018:3467-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1103809 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2018:2899-1 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2018-01547 · Nota de Segurança
• https://suse.com/support/update/announcement/2018/suse-su-20183467-2 · Nota
• https://bugzilla.suse.com/977043 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-12472 · Nota de Segurança
• https://suse.com/support/update/announcement/2018/suse-su-20182898-1 · Nota