PT-2024-12298 · Suse · Suse Manager Server Module+1

Frantisek Kobzik · Published 2024-02-15 · Updated 2024-10-29 · CVE-2023-32189

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SUSE Manager Server Module version 4.3

Description The issue is related to insecure handling of ssh keys used to bootstrap clients, allowing local attackers to potentially gain access to the keys. This could lead to unauthorized access.

Recommendations For SUSE Manager Server Module version 4.3, upgrade the affected component immediately to protect SSH keys and secure access.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2023-32189

OPENSUSE-SU-2024_0513-1

SUSE-SU-2024:0485-1

SUSE-SU-2024:0513-1

Affected Products

Suse Manager Server Module

Suse

References · 61

• https://osv.dev/vulnerability/SUSE-SU-2024:0485-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32189 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:0513-1 · Vendor Advisory
• https://bugzilla.suse.com/1218019 · Note
• https://bugzilla.suse.com/1213981 · Note
• https://bugzilla.suse.com/1218089 · Note
• https://bugzilla.suse.com/1219151 · Note
• https://bugzilla.suse.com/1215166 · Note
• https://bugzilla.suse.com/1216550 · Note
• https://bugzilla.suse.com/1214077 · Note
• https://suse.com/security/cve/CVE-2023-32189 · Note
• https://bugzilla.suse.com/1216609 · Note
• https://twitter.com/VulmonFeeds/status/1846624161587732787 · Twitter Post
• https://bugzilla.suse.com/1214791 · Note
• https://bugzilla.suse.com/1216114 · Note