SUSE-SU-2019:1789-1: spacewalk-backend&distro=SUSE Manager Proxy Module 4.0 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 09-07-2019Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2019:1789-1 is a vulnerability in spacewalk-backend&distro=SUSE Manager Proxy Module 4.0 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 2 · Downstream 0 · Related 2
CVE-2019-10136CVE-2019-10137

Timeline

  1. 09-07-2019
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for SUSE Manager Server 4.0 This update fixes the following issues: spacewalk-backend: - Do not duplicate 'http://' protocol when using proxies with 'deb' repositories (bsc#1138313) - Fix reposync when dealing with RedHat CDN (bsc#1138358) - Fix for CVE-2019-10136. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum. (bsc#1136480) spacewalk-web: - Change WebUI version 4.0.1 susemanager-doc-indexes: - Updated wording for prometheus section - Jeos VM update - Port 8050 for graphical console display - Content life-cycle docs are not enough for customer to understand (bsc#1137955) - Salt boot formula fails for SLES11 SP3 terminal (bsc#1136857) - Certificate verify failed when using vmware esxi virtual host gatherer (bsc#1136561) susemanager-docs_en: - Updated wording for prometheus section - Jeos VM update - Port 8050 for graphical console display - Content life-cycle docs are not enough for customer to understand (bsc#1137955) - Salt boot formula fails for SLES11 SP3 terminal (bsc#1136857) - Certificate verify failed when using vmware esxi virtual host gatherer (bsc#1136561) susemanager-sync-data: - Add channel family definitions for SLES12 SP3 LTSS (bsc#1139693) - Add OPENSUSE to allowed channel_families to make openSUSE Leap product visible in the product list (bsc#1138364)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse8 products
  • spacewalk-backend&distro=SUSE Manager Proxy Module 4.0< 4.0.22-3.3.1
  • spacewalk-backend&distro=SUSE Manager Server Module 4.0< 4.0.22-3.3.1
  • spacewalk-proxy&distro=SUSE Manager Proxy Module 4.0< 4.0.12-3.3.1
  • spacewalk-web&distro=SUSE Manager Proxy Module 4.0< 4.0.14-3.3.1
  • spacewalk-web&distro=SUSE Manager Server Module 4.0< 4.0.14-3.3.1

1 vendor · 8 products

References

12 links
Show all 12 references