Approved changes feed: RSS · Atom
cpe:2.3:a:opensuse:autoyast2:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Opensuse (3380e48e-e718-5685-8ad0-092ef58910e5) |
|---|---|
| Product | Autoyast2 (ca963c50-a8c8-54c4-9e71-790293837141) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:rpm/opensuse/autoyast2 |
purl2cpe | 2026-06-01 10:15:36.370628 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-18905 |
vulnerable | 2026-06-08 05:13:12.555225 |
Deprecated functionality in autoyast2 automatically imports gpg keys without checking them
MEDIUM (4.8)
A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux Enterprise Server 12 autoyast2 version 4.1.9-3.9.1 and prior versions. SUSE Linux Enterprise Server 15 autoyast2 version 4.0.70-3.20.1 and prior versions.
Published: 2020-04-03T11:00:16.880Z
Updated: 2024-09-17T02:52:07.503Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.