CVE-2023-22644: JWT token compromise can allow malicious actions including Remote Code Execution (RCE)

Modified

AliasesSUSE-RU-2023:2566-1SUSE-RU-2023:2595-1SUSE-SU-2023:4758-1+1 more

Published 20-09-2023Last modified 07-04-2025

Vulnerability summary

CVE-2023-22644 is a critical (CVSS 9.4) Generation of Incorrect Security Tokens vulnerability in suse manager_server. EPSS estimates a 0.46% chance of exploitation in the next 30 days, higher than 39.6% of scored vulnerabilities.

Priority

Prioritisesevere

Severe, CVSS 9.4 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 0% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?

CVSS score

9.4/10

010

Critical · v4.0 (CVE.org)

EPSS score

0.46%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5 · Related 5

OPENSUSE-SU-2024:0350-1 OPENSUSE-SU-2024:14447-1 SUSE-RU-2023:2592-1 SUSE-SU-2023:2594-1 SUSE-SU-2024:3911-1

Timeline

20-09-2023
PublishedVulnerability first disclosed.
07-04-2025
Last modifiedVulnerability information updated.

Description

A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE.

CVSS metrics

3 scores · 2 sources · 2 versions

v4.09.4v3.15.5

EPSS trend

Probability

0.46%

Chance of exploitation in the next 30 days

Percentile

40%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.46% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-1270Generation of Incorrect Security TokensThe product implements a Security Token mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However, the Security Tokens generated in the system are incorrect.

Affected systems

Version check

Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Suse62 products

branch-network-formula&distro=SUSE Manager Server Module 4.2< 0.1.1680167239.23f2fec-150300.3.6.2
branch-network-formula&distro=SUSE Manager Server Module 4.3< 0.1.1680167239.23f2fec-150400.3.3.3
cobbler&distro=SUSE Manager Server Module 4.3< 3.3.3-150400.5.25.3
cpu-mitigations-formula&distro=SUSE Manager Server Module 4.2< 0.5.0-150300.3.6.2
cpu-mitigations-formula&distro=SUSE Manager Server Module 4.3< 0.5.0-150400.3.3.3

hub-xmlrpc-api&distro=SUSE Manager Server Module 4.2< 0.7-150300.3.12.3
hub-xmlrpc-api&distro=SUSE Manager Server Module 4.3< 0.7-150400.5.6.5
inter-server-sync&distro=SUSE Manager Server Module 4.2< 0.2.8-150300.8.31.2
mgr-daemon&distro=SUSE Manager Proxy Module 4.3< 4.3.7-150400.3.9.5
perl-Satcon&distro=SUSE Manager Server Module 4.2< 4.2.3-150300.3.3.3
perl-Satcon&distro=SUSE Manager Server Module 4.3< 4.3.2-150400.3.3.5
python-urlgrabber&distro=SUSE Manager Server Module 4.3< 4.1.0-150400.4.3.6.3
release-notes-susemanager-proxy&distro=SUSE Manager Proxy 4.3< 4.3.10-150400.3.72.1
release-notes-susemanager&distro=SUSE Manager Server 4.3< 4.3.10-150400.3.93.1
spacecmd&distro=SUSE Manager Proxy Module 4.2< 4.2.23-150300.4.39.4
spacecmd&distro=SUSE Manager Proxy Module 4.3< 4.3.21-150400.3.18.5
spacecmd&distro=SUSE Manager Server Module 4.2< 4.2.23-150300.4.39.4
spacecmd&distro=SUSE Manager Server Module 4.3< 4.3.21-150400.3.18.5
spacewalk-admin&distro=SUSE Manager Server Module 4.3< 4.3.11-150400.3.6.6
spacewalk-backend&distro=SUSE Manager Proxy Module 4.2< 4.2.28-150300.4.41.4
spacewalk-backend&distro=SUSE Manager Proxy Module 4.3< 4.3.21-150400.3.21.13
spacewalk-backend&distro=SUSE Manager Server Module 4.2< 4.2.28-150300.4.41.4
spacewalk-backend&distro=SUSE Manager Server Module 4.3< 4.3.21-150400.3.21.13
spacewalk-certs-tools&distro=SUSE Manager Proxy Module 4.2< 4.2.20-150300.3.30.4
spacewalk-certs-tools&distro=SUSE Manager Server Module 4.2< 4.2.20-150300.3.30.4
spacewalk-config&distro=SUSE Manager Server Module 4.3< 4.3.10-150400.3.6.3
spacewalk-java&distro=SUSE Manager Server Module 4.2< 4.2.50-150300.3.66.5
spacewalk-java&distro=SUSE Manager Server Module 4.3< 4.3.58-150400.3.46.4
spacewalk-proxy-installer&distro=SUSE Manager Proxy Module 4.2< 4.2.12-150300.3.17.2
spacewalk-proxy-installer&distro=SUSE Manager Proxy Module 4.3< 4.3.11-150400.3.6.4
spacewalk-proxy&distro=SUSE Manager Proxy Module 4.3< 4.3.16-150400.3.20.6
spacewalk-search&distro=SUSE Manager Server Module 4.3< 4.3.9-150400.3.12.7
spacewalk-setup&distro=SUSE Manager Server Module 4.2< 4.2.12-150300.3.18.3
spacewalk-setup&distro=SUSE Manager Server Module 4.3< 4.3.16-150400.3.21.6
spacewalk-ssl-cert-check&distro=SUSE Manager Proxy Module 4.2< 4.2.3-150300.3.3.2
spacewalk-utils&distro=SUSE Manager Server Module 4.2< 4.2.19-150300.3.24.2
spacewalk-web&distro=SUSE Manager Proxy Module 4.2< 4.2.35-150300.3.44.4
spacewalk-web&distro=SUSE Manager Proxy Module 4.3< 4.3.31-150400.3.21.7
spacewalk-web&distro=SUSE Manager Server Module 4.2< 4.2.35-150300.3.44.4
spacewalk-web&distro=SUSE Manager Server Module 4.3< 4.3.31-150400.3.21.7
supportutils-plugin-susemanager&distro=SUSE Manager Server Module 4.2< 4.2.7-150300.3.15.4
supportutils-plugin-susemanager&distro=SUSE Manager Server Module 4.3< 4.3.7-150400.3.9.6
susemanager-build-keys&distro=SUSE Manager Proxy Module 4.2< 15.3.9-150300.3.14.1
susemanager-build-keys&distro=SUSE Manager Proxy Module 4.3< 15.4.9-150400.3.20.2
susemanager-build-keys&distro=SUSE Manager Server Module 4.2< 15.3.9-150300.3.14.1
susemanager-build-keys&distro=SUSE Manager Server Module 4.3< 15.4.9-150400.3.20.2
susemanager-doc-indexes&distro=SUSE Manager Server Module 4.2< 4.2-150300.12.45.4
susemanager-docs_en&distro=SUSE Manager Server Module 4.2< 4.2-150300.12.45.2
susemanager-docs_en&distro=SUSE Manager Server Module 4.3< 4.3-150400.9.27.3
susemanager-schema&distro=SUSE Manager Server Module 4.2< 4.2.28-150300.3.38.4
susemanager-schema&distro=SUSE Manager Server Module 4.3< 4.3.18-150400.3.18.7
susemanager-sls&distro=SUSE Manager Server Module 4.2< 4.2.34-150300.3.51.1
susemanager-sls&distro=SUSE Manager Server Module 4.3< 4.3.33-150400.3.25.7
susemanager-tftpsync&distro=SUSE Manager Server Module 4.3< 4.3.4-150400.3.9.9
susemanager&distro=SUSE Manager Server Module 4.2< 4.2.42-150300.3.54.4
susemanager&distro=SUSE Manager Server Module 4.3< 4.3.27-150400.3.26.5
uyuni-common-libs&distro=SUSE Manager Proxy Module 4.3< 4.3.8-150400.3.12.5
uyuni-common-libs&distro=SUSE Manager Server Module 4.3< 4.3.8-150400.3.12.5
virtual-host-gatherer&distro=SUSE Manager Server Module 4.2< 1.0.26-150300.3.15.2
virtual-host-gatherer&distro=SUSE Manager Server Module 4.3< 1.0.26-150400.3.12.3
manager_server≥ 4.2, < 4.2.50-150300.3.66.5 | ≥ 4.3, < 4.3.58-150400.3.46.4
neuvector< 0.0.0-20231003121714-be746957ee7c

Show all 62

Github.com/neuvector1 product

neuvector< 0.0.0-20231003121714-be746957ee7c

2 vendors · 63 products

References

111 links

bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32188WEB
github.com/neuvector/neuvector/security/advisories/GHSA-622h-h2p8-743xWEB
bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22644X Transferred
www.suse.com/support/update/announcement/-2023-2566/suse-ru-20232566-1/Advisory
bugzilla.suse.com/1201063REPORT
bugzilla.suse.com/1203599REPORT
bugzilla.suse.com/1204089REPORT
bugzilla.suse.com/1204270REPORT
bugzilla.suse.com/1204900REPORT
bugzilla.suse.com/1205600REPORT

Show all 100 references

bugzilla.suse.com/1206060REPORT
bugzilla.suse.com/1206191REPORT
bugzilla.suse.com/1206423REPORT
bugzilla.suse.com/1206725REPORT
bugzilla.suse.com/1206783REPORT
bugzilla.suse.com/1207063REPORT
bugzilla.suse.com/1207595REPORT
bugzilla.suse.com/1207814REPORT
bugzilla.suse.com/1207829REPORT
bugzilla.suse.com/1207830REPORT
bugzilla.suse.com/1208288REPORT
bugzilla.suse.com/1208321REPORT
bugzilla.suse.com/1208427REPORT
bugzilla.suse.com/1208522REPORT
bugzilla.suse.com/1208536REPORT
bugzilla.suse.com/1208540REPORT
bugzilla.suse.com/1208550REPORT
bugzilla.suse.com/1208586REPORT
bugzilla.suse.com/1208661REPORT
bugzilla.suse.com/1208687REPORT
bugzilla.suse.com/1208719REPORT
bugzilla.suse.com/1208772REPORT
bugzilla.suse.com/1208965REPORT
bugzilla.suse.com/1209143REPORT
bugzilla.suse.com/1209149REPORT
bugzilla.suse.com/1209215REPORT
bugzilla.suse.com/1209220REPORT
bugzilla.suse.com/1209231REPORT
bugzilla.suse.com/1209253REPORT
bugzilla.suse.com/1209277REPORT
bugzilla.suse.com/1209386REPORT
bugzilla.suse.com/1209395REPORT
bugzilla.suse.com/1209434REPORT
bugzilla.suse.com/1209508REPORT
bugzilla.suse.com/1209557REPORT
bugzilla.suse.com/1209926REPORT
bugzilla.suse.com/1209938REPORT
bugzilla.suse.com/1209993REPORT
bugzilla.suse.com/1210086REPORT
bugzilla.suse.com/1210094REPORT
bugzilla.suse.com/1210101REPORT
bugzilla.suse.com/1210107REPORT
bugzilla.suse.com/1210154REPORT
bugzilla.suse.com/1210162REPORT
bugzilla.suse.com/1210349REPORT
bugzilla.suse.com/1210437REPORT
bugzilla.suse.com/1210458REPORT
bugzilla.suse.com/1210776REPORT
bugzilla.suse.com/1210835REPORT
bugzilla.suse.com/1211958REPORT
bugzilla.suse.com/1212363REPORT
www.suse.com/security/cve/CVE-2023-22644WEB
www.suse.com/support/update/announcement/-2023-2595/suse-ru-20232595-1/Advisory
bugzilla.suse.com/1179747REPORT
bugzilla.suse.com/1186011REPORT
bugzilla.suse.com/1207550REPORT
bugzilla.suse.com/1207941REPORT
bugzilla.suse.com/1208984REPORT
bugzilla.suse.com/1209877REPORT
bugzilla.suse.com/1209915REPORT
bugzilla.suse.com/1210011REPORT
bugzilla.suse.com/1210232REPORT
bugzilla.suse.com/1210311REPORT
bugzilla.suse.com/1210406REPORT
bugzilla.suse.com/1210659REPORT
bugzilla.suse.com/1210957REPORT
bugzilla.suse.com/1211330REPORT
bugzilla.suse.com/1212096REPORT
www.suse.com/support/update/announcement/2023/suse-su-20234758-1/Advisory
bugzilla.suse.com/1191143REPORT
bugzilla.suse.com/1204235REPORT
bugzilla.suse.com/1207012REPORT
bugzilla.suse.com/1207532REPORT
bugzilla.suse.com/1210928REPORT
bugzilla.suse.com/1210930REPORT
bugzilla.suse.com/1211355REPORT
bugzilla.suse.com/1211560REPORT
bugzilla.suse.com/1211649REPORT
bugzilla.suse.com/1212695REPORT
bugzilla.suse.com/1212904REPORT
bugzilla.suse.com/1213469REPORT
bugzilla.suse.com/1214186REPORT
bugzilla.suse.com/1214471REPORT
bugzilla.suse.com/1214601REPORT
bugzilla.suse.com/1214759REPORT
bugzilla.suse.com/1215209REPORT
bugzilla.suse.com/1215514REPORT
bugzilla.suse.com/1215949REPORT
bugzilla.suse.com/1216030REPORT
bugzilla.suse.com/1216041REPORT

Showing 100 of 111.