SUSE Manager Server

cryptctl: client side password hashing is equivalent to clear text password storage

JWT token compromise can allow malicious actions including Remote Code Execution (RCE)

salt-api is accessible to every user on SUSE Manager Server

crypto: algif_aead - Revert to operating out-of-place

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

arpwatch: Local privilege escalation from runtime user to root

rmt-server-pubcloud allows to escalate from user _rmt to root

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

SUMA unauthenticated remote DoS via resource exhaustion

SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do

SUMA user enumeration via weak error message

Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows remote attackers to inject arbitrary web script or HTML via a crafted request that is not properly handled when logging.

Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) kickstart/cobbler/CustomSnippetList.do, (2) channels/software/Entitlements.do, or (3) admin/multiorg/OrgUsers.do.

SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload

SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction

cups: ownership of /var/log/cups allows the lp user to create files as root