PT-2023-18600 · Suse · Suse Manager Server Module+1

Paolo Perego

·

Published

2023-06-21

·

Updated

2024-11-05

·

CVE-2023-22644

CVSS v4.0

9.4

Critical

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions SUSE Manager Server Module 4.2 versions prior to 4.2.50-150300.3.66.5 SUSE Manager Server Module 4.3 versions prior to 4.3.58-150400.3.46.4 NeuVector (affected versions not specified)
Description A user can reverse engineer the JSON Web Token (JWT) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector, potentially leading to Remote Code Execution (RCE). Additionally, an Innsertion of Sensitive Information into Log File vulnerability in SUSE SUSE Manager Server Module causes sensitive information to be logged.
Recommendations For SUSE Manager Server Module 4.2 versions prior to 4.2.50-150300.3.66.5, update to version 4.2.50-150300.3.66.5 or later. For SUSE Manager Server Module 4.3 versions prior to 4.3.58-150400.3.46.4, update to version 4.3.58-150400.3.46.4 or later. For NeuVector, as a temporary workaround, consider restricting access to the authentication mechanism using JWT tokens until a patch is available. Avoid using the JWT token in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability in NeuVector.

Fix

RCE

Weakness Enumeration

Related Identifiers

CVE-2023-22644
GHSA-622H-H2P8-743X
GO-2024-3201
OPENSUSE-SU-2023_1831-1
OPENSUSE-SU-2023_2594-1
OPENSUSE-SU-2024:0350-1
OPENSUSE-SU-2024:14447-1
OPENSUSE-SU-2024_3911-1
SUSE-RU-2023:2566-1
SUSE-RU-2023:2592-1
SUSE-RU-2023:2595-1
SUSE-SU-2023:2594-1
SUSE-SU-2023:4758-1
SUSE-SU-2023_4737-1
SUSE-SU-2024:3911-1

Affected Products

Suse Manager Server Module
Suse