Description
A Plaintext Storage of a Password vulnerability in SUSE exposes the credentials for the HTTP proxy in the log files. This issue affects Container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1: from ? before 4.3.33-150400.3.55.2; Container suse/manager/5.0/x86_64/proxy-httpd:5.0.5.7.23.1: from ? before 5.0.14-150600.4.17.1; Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 5.0.14-150600.4.17.1; Image SLES15-SP4-Manager-Proxy-4-3-BYOS: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE: from ? before 4.3.33-150400.3.55.2; SUSE Manager Proxy Module 4.3: from ? before 4.3.33-150400.3.55.2; SUSE Manager Server Module 4.3: from ? before 4.3.33-150400.3.55.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | Container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1 | ? – < 4.3.33-150400.3.55.2 | 4.3.33-150400.3.55.2 |
| SUSE | Container suse/manager/5.0/x86_64/proxy-httpd:5.0.5.7.23.1 | ? – < 5.0.14-150600.4.17.1 | 5.0.14-150600.4.17.1 |
| SUSE | Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1 | ? – < 5.0.14-150600.4.17.1 | 5.0.14-150600.4.17.1 |
| SUSE | Image SLES15-SP4-Manager-Proxy-4-3-BYOS | ? – < 4.3.33-150400.3.55.2 | 4.3.33-150400.3.55.2 |
| SUSE | Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure | ? – < 4.3.33-150400.3.55.2 | 4.3.33-150400.3.55.2 |
| SUSE | Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 | ? – < 4.3.33-150400.3.55.2 | 4.3.33-150400.3.55.2 |
| SUSE | Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE | ? – < 4.3.33-150400.3.55.2 | 4.3.33-150400.3.55.2 |
| SUSE | Image SLES15-SP4-Manager-Server-4-3-BYOS | ? – < 4.3.33-150400.3.55.2 | 4.3.33-150400.3.55.2 |
| SUSE | Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure | ? – < 4.3.33-150400.3.55.2 | 4.3.33-150400.3.55.2 |
| SUSE | Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 | ? – < 4.3.33-150400.3.55.2 | 4.3.33-150400.3.55.2 |
| SUSE | Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE | ? – < 4.3.33-150400.3.55.2 | 4.3.33-150400.3.55.2 |
| SUSE | SUSE Manager Proxy Module 4.3 | ? – < 4.3.33-150400.3.55.2 | 4.3.33-150400.3.55.2 |
| SUSE | SUSE Manager Server Module 4.3 | ? – < 4.3.33-150400.3.55.2 | 4.3.33-150400.3.55.2 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Manager Server Module 4.3 | cobbler | 3.3.3-150400.5.58.3 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | grafana-formula | 4.3.0-150400.3.24.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | inter-server-sync | 0.3.7-150400.3.39.4 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacecmd | 4.3.31-150400.3.48.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacewalk-admin | 4.3.14-150400.3.15.3 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacewalk-backend | 4.3.33-150400.3.55.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacewalk-client-tools | 4.3.23-150400.3.39.3 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacewalk-config | 4.3.16-150400.3.24.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacewalk-java | 4.3.87-150400.3.110.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacewalk-utils | 4.3.24-150400.3.35.4 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | spacewalk-web | 4.3.45-150400.3.60.3 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | subscription-matcher | 0.40-150400.3.28.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | supportutils-plugin-susemanager | 4.3.15-150400.3.33.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | susemanager | 4.3.42-150400.3.66.1 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | susemanager-build-keys | 15.4.11-150400.3.35.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | susemanager-docs_en | 4.3.16-150400.9.72.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | susemanager-schema | 4.3.29-150400.3.51.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | susemanager-sls | 4.3.47-150400.3.61.4 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server Module 4.3 | susemanager-sync-data | 4.3.24-150400.3.44.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Server 4.3 | release-notes-susemanager | 4.3.16-150400.3.140.1 | SUSE-SU-2025:02476-1 |
| SUSE Manager Proxy Module 4.3 | mgr-daemon | 4.3.12-150400.3.24.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | spacecmd | 4.3.31-150400.3.48.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | spacewalk-backend | 4.3.33-150400.3.55.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | spacewalk-client-tools | 4.3.23-150400.3.39.3 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | spacewalk-proxy-installer | 4.3.12-150400.3.9.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | spacewalk-web | 4.3.45-150400.3.60.3 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | supportutils-plugin-susemanager-proxy +1 | 4.3.5-150400.3.9.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | susemanager-build-keys | 15.4.11-150400.3.35.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | susemanager-tftpsync-recv | 4.3.10-150400.3.12.2 | SUSE-SU-2025:02475-1 |
| SUSE Manager Proxy Module 4.3 | uyuni-proxy-systemd-services | 4.3.16-150000.1.33.1 | SUSE-SU-2025:02475-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Manager Proxy 4.3 | release-notes-susemanager-proxy | 4.3.16-150400.3.98.1 | SUSE-SU-2025:02476-1 |
| SUSE Manager Client Tools for SLE Micro 5 | uyuni-proxy-systemd-services | 4.3.16-150000.1.33.1 | SUSE-SU-2025:02475-1 |
| SUSE Manager Client Tools 15 | uyuni-proxy-systemd-services | 4.3.16-150000.1.33.1 | SUSE-SU-2025:02475-1 |
Advisories 2
- SUSE-SU-2025:02475-1 Security update 4.3.16 for Multi-Linux Manager Server SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02476-1 Security update 4.3.16 for Multi-Linux Manager Server SUSE / openSUSE Security Updates · Mar 23, 2026