Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-32189 EUVD-2023-36454GHSA-6hvm-8v29-cgp8

Insecure handling SSH key in SUSE Manager when bootstrapping new clients

Published Oct 16, 2024 · Updated Oct 29, 2024 · Assigned by suse

Vendor: SUSE Product: SUSE Manager Server Module 4.3

Description

Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys

Affected products

VendorProductAffectedFixed
SUSE SUSE Manager Server Module 4.3 ? – < 4.3.27-150400.3.38.2 4.3.27-150400.3.38.2

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SUSE Manager Server Module 4.3 cobbler 3.3.3-150400.5.39.5 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 grafana-formula 0.10.0-150400.3.15.5 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 inter-server-sync 0.3.2-150400.3.27.5 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 jose4j 0.5.1-150400.3.6.2 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 liberate-formula 0.1.0-150400.10.3.3 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 patterns-suse-manager 4.3-150400.5.9.5 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 prometheus-formula 0.8.0-150400.3.6.5 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 prometheus-postgres_exporter 0.10.1-150400.3.9.5 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 saltboot-formula 0.1.1701196218.b6b8ca1-150400.3.15.3 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 spacecmd 4.3.26-150400.3.33.5 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 spacewalk-backend 4.3.27-150400.3.38.2 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 spacewalk-certs-tools 4.3.22-150400.3.25.1 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 spacewalk-client-tools 4.3.18-150400.3.24.7 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 spacewalk-java 4.3.71-150400.3.74.2 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 spacewalk-setup 4.3.19-150400.3.30.5 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 spacewalk-utils 4.3.19-150400.3.21.5 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 spacewalk-web 4.3.37-150400.3.39.7 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 subscription-matcher 0.35-150400.3.19.5 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 supportutils-plugin-susemanager 4.3.10-150400.3.18.5 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 susemanager 4.3.34-150400.3.45.5 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 susemanager-build-keys 15.4.10-150400.3.23.5 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 susemanager-docs_en 4.3-150400.9.53.5 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 susemanager-schema 4.3.24-150400.3.36.7 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 susemanager-sls 4.3.40-150400.3.44.1 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 susemanager-sync-data 4.3.16-150400.3.22.2 SUSE-SU-2024:0485-1
SUSE Manager Server Module 4.3 uyuni-reportdb-schema 4.3.9-150400.3.12.7 SUSE-SU-2024:0485-1
SUSE Manager Server 4.3 release-notes-susemanager 4.3.11-150400.3.100.1 SUSE-SU-2024:0513-1
SUSE Manager Proxy Module 4.3 mgr-daemon 4.3.8-150400.3.12.5 SUSE-SU-2024:0485-1
SUSE Manager Proxy Module 4.3 patterns-suse-manager 4.3-150400.5.9.5 SUSE-SU-2024:0485-1
SUSE Manager Proxy Module 4.3 spacecmd 4.3.26-150400.3.33.5 SUSE-SU-2024:0485-1
SUSE Manager Proxy Module 4.3 spacewalk-backend 4.3.27-150400.3.38.2 SUSE-SU-2024:0485-1
SUSE Manager Proxy Module 4.3 spacewalk-certs-tools 4.3.22-150400.3.25.1 SUSE-SU-2024:0485-1
SUSE Manager Proxy Module 4.3 spacewalk-client-tools 4.3.18-150400.3.24.7 SUSE-SU-2024:0485-1
SUSE Manager Proxy Module 4.3 spacewalk-web 4.3.37-150400.3.39.7 SUSE-SU-2024:0485-1
SUSE Manager Proxy Module 4.3 susemanager-build-keys 15.4.10-150400.3.23.5 SUSE-SU-2024:0485-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SUSE Manager Proxy 4.3 release-notes-susemanager-proxy 4.3.11-150400.3.79.1 SUSE-SU-2024:0513-1

Advisories 2

References