CVE-2022-21952: falha de alta gravidade em SUSE Manager Server 4.1
SUMA unauthenticated remote DoS via resource exhaustion
Publicada em · Atualizada em
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 1.5%
probabilidade de exploração
1.5%top 25% das CVEs
exploração observada
nãonenhuma fonte reporta
A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVEs relacionadas — SUSE Manager Server 4.1
No mesmo produto, das mais perigosas para as menos.
CVE-2022-31248MEDIUMSUMA user enumeration via weak error messageEPSS 1.0%CVE-2022-43753MEDIUMSUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownloadEPSS 0.8%CVE-2022-31255MEDIUMSUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewActionEPSS 0.8%CVE-2022-43754LOWSUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.doEPSS 0.4%CVE-2022-31254HIGHrmt-server-pubcloud allows to escalate from user _rmt to rootEPSS 0.2%