Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.3.33-150400.3.55.2, 5.0.14-150600.4.17.1
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
A Plaintext Storage of a Password vulnerability in SUSE exposes the credentials for the HTTP proxy in the log files. This issue affects Container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1: from ? before 4.3.33-150400.3.55.2; Container suse/manager/5.0/x86_64/proxy-httpd:5.0.5.7.23.1: from ? before 5.0.14-150600.4.17.1; Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 5.0.14-150600.4.17.1; Image SLES15-SP4-Manager-Proxy-4-3-BYOS: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE: from ? before 4.3.33-150400.3.55.2; SUSE Manager Proxy Module 4.3: from ? before 4.3.33-150400.3.55.2; SUSE Manager Server Module 4.3: from ? before 4.3.33-150400.3.55.2.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- spacewalk-backend
fixed in 4.3.33-150400.3.55.2
- spacewalk-backend
fixed in 5.0.14-150600.4.17.1
- spacewalk-backend
fixed in 5.0.14-150600.4.17.1
- spacewalk-backend
fixed in 4.3.33-150400.3.55.2
- spacewalk-backend
fixed in 4.3.33-150400.3.55.2
- spacewalk-backend
fixed in 4.3.33-150400.3.55.2
- spacewalk-backend
fixed in 4.3.33-150400.3.55.2
- spacewalk-backend
fixed in 4.3.33-150400.3.55.2
- spacewalk-backend
fixed in 4.3.33-150400.3.55.2
- spacewalk-backend
fixed in 4.3.33-150400.3.55.2
- spacewalk-backend
fixed in 4.3.33-150400.3.55.2
- spacewalk-backend
fixed in 4.3.33-150400.3.55.2
- spacewalk-backend
fixed in 4.3.33-150400.3.55.2