rpm package
suse/reprepro&distro=SUSE Manager Server Module 4.3
pkg:rpm/suse/reprepro&distro=SUSE%20Manager%20Server%20Module%204.3
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-31248 | — | < 5.3.0-150400.3.3.1 | 5.3.0-150400.3.3.1 | Jun 22, 2022 | A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4. | ||
| CVE-2021-41411 | — | < 5.4.0-150400.3.6.1 | 5.4.0-150400.3.6.1 | Jun 16, 2022 | drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability. | ||
| CVE-2022-0860 | — | < 5.4.0-150400.3.6.1 | 5.4.0-150400.3.6.1 | Mar 11, 2022 | Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2. |
- CVE-2022-31248Jun 22, 2022affected < 5.3.0-150400.3.3.1fixed 5.3.0-150400.3.3.1
A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.
- CVE-2021-41411Jun 16, 2022affected < 5.4.0-150400.3.6.1fixed 5.4.0-150400.3.6.1
drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability.
- CVE-2022-0860Mar 11, 2022affected < 5.4.0-150400.3.6.1fixed 5.4.0-150400.3.6.1
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.