Suse Linux Enterprise Server 15
Approved changes feed: RSS · Atom
cpe:2.3:a:suse:suse_linux_enterprise_server_15:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Suse (ec535637-432e-5a38-96dd-4ec1e0138f73) |
|---|---|
| Product | Suse Linux Enterprise Server 15 (84d86e4f-ed43-530b-9ad4-e6026ecb6ed5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-45154 |
vulnerable | 2026-06-08 05:50:35.836062 |
supportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh
MEDIUM (4.4)
A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 allows attackers that get access to the support logs to gain knowledge of the stored credentials This issue affects: SUSE Linux Enterprise Server 12 supportutils version 3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Information and prior versions. SUSE Linux Enterprise Server 15 supportutils version 3.1.21-150000.5.44.1 and prior versions. SUSE Linux Enterprise Server 15 SP3 supportutils version 3.1.21-150300.7.35.15.1 and prior versions.
Published: 2023-02-15T00:00:00.000Z
Updated: 2025-03-18T19:24:37.461Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8013 |
vulnerable | 2026-06-08 05:27:14.645804 |
permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim
LOW (2.2)
A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12 permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to 2013.1.7-0.6.12.1.
Published: 2020-03-02T16:35:13.188Z
Updated: 2024-09-16T17:23:50.476Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3691 |
vulnerable | 2026-06-08 05:13:55.344574 |
Local privilege escalation from user munge to root
HIGH (7.7)
A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE Factory munge versions prior to 0.5.13-6.1.
Published: 2020-01-23T16:00:20.042Z
Updated: 2024-09-16T22:15:11.514Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3689 |
vulnerable | 2026-06-08 05:13:55.339038 |
nfs-utils: root-owned files stored in insecure /var/lib/nfs directory
MEDIUM (5.1)
The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.
Published: 2019-09-19T13:27:58.449Z
Updated: 2024-09-17T04:14:20.947Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3688 |
vulnerable | 2026-06-08 05:13:55.333291 |
squid: /usr/sbin/pinger packaged with wrong permission
MEDIUM (5.1)
The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary
Published: 2019-10-07T14:00:39.441Z
Updated: 2024-09-16T23:01:09.236Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18905 |
vulnerable | 2026-06-08 05:13:12.554034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18903 |
vulnerable | 2026-06-08 05:13:12.539765 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18902 |
vulnerable | 2026-06-08 05:13:12.539293 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18901 |
vulnerable | 2026-06-08 05:13:12.538827 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18900 |
vulnerable | 2026-06-08 05:13:12.534811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18897 |
vulnerable | 2026-06-08 05:13:12.513245 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20105 |
vulnerable | 2026-06-08 05:11:26.666939 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12476 |
vulnerable | 2026-06-08 05:10:41.625770 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.