Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: SUSE Linux SMT 3.0.37 Clear all filters
TI-2018-08958 CVE-2018-12472 · GHSA-52vw-gr9g-vp37

Authentication bypass in sibling check

Priority MEDIUM 42

A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.01531 Published 2018-10-04 Fixed in 3.0.37 CWE-287
TI-2018-08957 CVE-2018-12471 · GHSA-6gf8-cqw7-6g5f

External Entity processing in the RegistrationSharing module

Priority LOW 38

A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01529 Published 2018-10-04 Fixed in 3.0.37 CWE-611
TI-2018-08956 CVE-2018-12470 · GHSA-xmcr-cjjw-v9f4

SQL injection in RegistrationSharing module

Priority MEDIUM 46

A SQL Injection in the RegistrationSharing module of SUSE Linux SMT allows remote attackers to cause execute arbitrary SQL statements.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01988 Published 2018-10-04 Fixed in 3.0.37 CWE-89