Suse vulnerabilities
253 CVEs and advisories name Suse as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-22030Rancher agents can be hijacked by taking over the Rancher Server URL
- CVE-2024-22029tomcat packaging allows for escalation to root from tomcat user
- CVE-2023-32196Rancher's External RoleTemplates can lead to privilege escalation
- CVE-2023-32194Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core'
- CVE-2023-32193Norman API Cross-site Scripting Vulnerability
- CVE-2023-32192Rancher API Server Cross-site Scripting Vulnerability
- CVE-2023-32191rke's credentials are stored in the RKE1 Cluster state ConfigMap
- CVE-2023-32190mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable
- CVE-2023-32188JWT token compromise can allow malicious actions including Remote Code Execution (RCE)
- CVE-2023-22650Rancher does not automatically clean up a user deleted or disabled from the configured Authentication Provider
- CVE-2023-22649Rancher 'Audit Log' leaks sensitive information
- CVE-2023-22644JWT token compromise can allow malicious actions including Remote Code Execution (RCE)
- CVE-2023-32182A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SU
- CVE-2023-32186A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers with access to K3s servers apiserver/sup
- CVE-2023-32187An Allocation of Resources Without Limits or Throttling vulnerability in SUSE k3s allows attackers with access to K3s servers' apiserver/sup
- CVE-2022-43760An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher allows users in some h
- CVE-2023-22647An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate K
- CVE-2023-22648A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they
- CVE-2023-22651Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation.
- CVE-2023-22645kubewarden: Excessive permissions for kubewarden-controller-manager-cluster-role
- CVE-2022-45155obs-service-go_modules: arbitrary directory delete
- CVE-2022-45154supportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh
- CVE-2022-45153saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls
- CVE-2023-22643libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls
- CVE-2022-43759Rancher: Privilege escalation via promoted roles
- CVE-2022-43758Rancher: Command injection in Git package
- CVE-2022-43757Rancher: Exposure of sensitive fields
- CVE-2022-43756Rancher/Wrangler: Denial of service when processing Git credentials
- CVE-2022-43755Rancher: Non-random authentication token
- CVE-2022-31254rmt-server-pubcloud allows to escalate from user _rmt to root