SUSE Linux Enterprise Server 12

7 results · Clear filters · Feed

• Medium 4.4
  CVE-2022-45154

  supportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh

  A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 allows attackers that get access to the support logs to gain knowledge of the …

  SUSE SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 15 SP3 Linux
  Feb 15, 2023
• Medium 4.8
  CVE-2019-18905

  Deprecated functionality in autoyast2 automatically imports gpg keys without checking them

  A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create …

  SUSE SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 12 Linux
  Apr 3, 2020
• Medium 5.1
  CVE-2019-18901

  mysql-systemd-helper allows setting 640 permissions of arbitrary files

  A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This i…

  SUSE SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 12 Linux
  Mar 2, 2020
• Medium 5.7
  CVE-2019-3698

  nagios cron job allows privilege escalation from user nagios to root

  UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winni…

  SUSE openSUSE Factory SUSE Linux Enterprise Server 12 Linux
  Feb 28, 2020
• Medium 4.0
  CVE-2019-18900

  libzypp stores cookies world readable

  : Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: …

  SUSE SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 12 CaaS Platform 3.0 Linux Debian Ubuntu
  Jan 24, 2020
• Medium 5.1
  CVE-2019-3688

  squid: /usr/sbin/pinger packaged with wrong permission

  The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker tha…

  SUSE SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 12 Linux
  Oct 7, 2019
• Medium 5.1
  CVE-2019-3689

  nfs-utils: root-owned files stored in insecure /var/lib/nfs directory

  The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains …

  SUSE SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 12 nfs-utils Linux Debian Ubuntu
  Sep 19, 2019