CVE-2019-18906

A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE Manager Server 4.0 cryptctl versions prior to 2.4.

Score

CVSS 3.1 9.8 Critical

Status

Modified - meissner@suse.de

Published

2021-06-30

Last modified

2024-09-16

Weaknesses

CWE-287

Affected products

• Cryptctl (Opensuse)
• Suse Linux Enterprise Server For Sap 12-sp5 (Suse)
• Suse Manager Server 4.0 (Suse)

References

• https://bugzilla.suse.com/show_bug.cgi?id=1186226