Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-22037 EUVD-2024-19640GHSA-4mrg-r3f5-vhvf

Database password leaked by systemd uyuni-server-attestation service

Published Nov 28, 2024 · Updated Nov 28, 2024 · Assigned by suse

Vendor: SUSE Product: SUSE Manager Server 5.0

Description

The uyuni-server-attestation systemd service needs a database_password environment variable. This file has 640 permission, and cannot be shown users, but the environment is still exposed by systemd to non-privileged users.

Affected products

VendorProductAffectedFixed
SUSE SUSE Manager Server 5.0 ? – < 0.1.26-150500.3.12.2 0.1.26-150500.3.12.2

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP6 golang-github-prometheus-promu 0.17.0-150000.3.24.1 SUSE-SU-2025:0525-1
SLES 15 SP6 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
SLES 15 SP5 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
SLES 15 SP4 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
SLES 15 SP3 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
Show 18 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP5 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
SLES for SAP 15 SP4 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
SLES for SAP 15 SP3 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
SLE Micro 6.0 salt 3006.0-9.1 SUSE-SU-2025:20124-1
SLE HPC 15 SP5 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
SLE HPC 15 SP4 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
SLE HPC 15 SP3 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
SUSE Manager Server 5.0 uyuni-storage-setup 5.0.3-150500.12.6.4 SUSE-RU-2024:4008-1
SUSE Manager Server 5.0 uyuni-tools 0.1.26-150500.3.12.2 SUSE-RU-2024:4008-1
SUSE Manager Server 4.3 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
SUSE Manager Retail Branch Server Extension 5.0 uyuni-storage-setup 5.0.3-150500.12.6.4 SUSE-RU-2024:4008-1
SUSE Manager Retail Branch Server Extension 5.0 uyuni-tools 0.1.26-150500.3.12.2 SUSE-RU-2024:4008-1
SUSE Manager Proxy 5.0 uyuni-storage-setup 5.0.3-150500.12.6.4 SUSE-RU-2024:4008-1
SUSE Manager Proxy 5.0 uyuni-tools 0.1.26-150500.3.12.2 SUSE-RU-2024:4008-1
SUSE Manager Proxy 4.3 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
SUSE Manager Client Tools for SLE Micro 5 dracut-saltboot 0.1.1728559936.c16d4fb-150000.1.56.1 SUSE-SU-2025:0525-1
SUSE Manager Client Tools for SLE Micro 5 uyuni-tools 0.1.28-150000.1.16.1 SUSE-SU-2025:0525-1
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 scap-security-guide 0.1.75-1.32.1 SUSE-SU-2025:0532-1, SUSE-EL-9-CLIENT-TOOLS-2025-532
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 spacecmd 5.0.11-1.44.1 SUSE-SU-2025:0532-1, SUSE-EL-9-CLIENT-TOOLS-2025-532
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 uyuni-tools 0.1.28-1.14.1 SUSE-SU-2025:0532-1, SUSE-EL-9-CLIENT-TOOLS-2025-532
SUSE Manager Client Tools 15 dracut-saltboot 0.1.1728559936.c16d4fb-150000.1.56.1 SUSE-SU-2025:0525-1
SUSE Manager Client Tools 15 golang-github-prometheus-prometheus 2.53.3-150000.3.59.1 SUSE-SU-2025:0525-1
SUSE Manager Client Tools 15 grafana 10.4.13-150000.1.66.1 SUSE-SU-2025:0525-1
SUSE Manager Client Tools 15 spacecmd 5.0.11-150000.3.130.1 SUSE-SU-2025:0525-1
SUSE Manager Client Tools 15 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
SUSE Manager Client Tools 15 supportutils-plugin-susemanager-client 5.0.4-150000.3.27.1 SUSE-SU-2025:0525-1
SUSE Manager Client Tools 15 uyuni-tools 0.1.28-150000.1.16.1 SUSE-SU-2025:0525-1
SUSE Manager Client Tools 12 golang-github-prometheus-prometheus 2.53.3-1.56.1 SUSE-SU-2025:0524-1
SUSE Manager Client Tools 12 golang-github-prometheus-promu 0.17.0-1.24.1 SUSE-SU-2025:0524-1
SUSE Manager Client Tools 12 grafana 10.4.13-1.66.2 SUSE-SU-2025:0524-1
SUSE Manager Client Tools 12 spacecmd 5.0.11-38.153.1 SUSE-SU-2025:0524-1
SUSE Manager Client Tools 12 supportutils-plugin-salt 1.2.3-6.25.1 SUSE-SU-2025:0524-1
SUSE Manager Client Tools 12 supportutils-plugin-susemanager-client 5.0.4-6.33.1 SUSE-SU-2025:0524-1
SUSE Manager Client Tools 12 uyuni-tools 0.1.28-1.16.1 SUSE-SU-2025:0524-1
SUSE Enterprise Storage 7.1 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
SUSE EL-9:Update:Products:ManagerTools:Update scap-security-guide 0.1.75-1.32.1 SUSE-SU-2025:0532-1
SUSE EL-9:Update:Products:ManagerTools:Update spacecmd 5.0.11-1.44.1 SUSE-SU-2025:0532-1
SUSE EL-9:Update:Products:ManagerTools:Update uyuni-tools 0.1.28-1.14.1 SUSE-SU-2025:0532-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 15.6 dracut-saltboot 0.1.1728559936.c16d4fb-150000.1.56.1 SUSE-SU-2025:0525-1
openSUSE Leap 15.6 golang-github-prometheus-promu 0.17.0-150000.3.24.1 SUSE-SU-2025:0525-1
openSUSE Leap 15.6 spacecmd 5.0.11-150000.3.130.1 SUSE-SU-2025:0525-1
openSUSE Leap 15.6 supportutils-plugin-salt 1.2.3-150000.3.16.1 SUSE-SU-2025:0525-1
openSUSE Leap 15.6 supportutils-plugin-susemanager-client 5.0.4-150000.3.27.1 SUSE-SU-2025:0525-1

Advisories 7

References