SUSE SUSE Linux Enterprise Server 12

12 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-45154supportutils – 3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Informationsupportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.shMEDIUM 5.50.2 %
CVE-2019-18905autoyast2 – 4.1.9-3.9.1Deprecated functionality in autoyast2 automatically imports gpg keys without checking themMEDIUM 5.90.7 %
CVE-2019-18903wicked – < 0.6.60-2.18.1wicked: Use-after-free when receiving invalid DHCP6 IA_PD optionCRITICAL 9.82.4 %
CVE-2019-18902wicked – < 0.6.60-3.5.1wicked: Use-after-free when receiving invalid DHCP6 client optionsCRITICAL 9.82.4 %
CVE-2020-8013permissions – < 2015.09.28.1626-17.27.1permissions: chkstat sets unintended setuid/capabilities for mrsh and wodimLOW 2.50.3 %
CVE-2019-18901mariadb – < 10.2.31-3.25.1mysql-systemd-helper allows setting 640 permissions of arbitrary filesMEDIUM 5.50.4 %
CVE-2019-18897salt-master – 2019.2.0-46.83.1Local privilege escalation from user salt to rootHIGH 8.40.4 %
CVE-2019-3698nagios – 3.5.1-5.27nagios cron job allows privilege escalation from user nagios to rootHIGH 7.00.7 %
CVE-2019-18900libzypp – < 16.21.2-2.45.1libzypp stores cookies world readableMEDIUM 4.00.3 %
CVE-2019-3693mailman – < 2.1.17-3.11.1Local privilege escalation from user wwwrun to root in the packaging of mailmanHIGH 7.80.4 %
CVE-2019-3688squid – 3.5.21-26.17.1squid: /usr/sbin/pinger packaged with wrong permissionHIGH 7.10.3 %
CVE-2019-3689before and including version 1.3.0-34.18.1nfs-utils: root-owned files stored in insecure /var/lib/nfs directoryCRITICAL 9.81.5 %