Suse Linux Enterprise Server 12
Approved changes feed: RSS · Atom
cpe:2.3:a:suse:suse_linux_enterprise_server_12:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Suse (ec535637-432e-5a38-96dd-4ec1e0138f73) |
|---|---|
| Product | Suse Linux Enterprise Server 12 (71bda3ee-7464-54ad-8e07-adb30bbb600d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-45154 |
vulnerable | 2026-06-08 05:50:35.835004 |
supportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh
MEDIUM (4.4)
A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 allows attackers that get access to the support logs to gain knowledge of the stored credentials This issue affects: SUSE Linux Enterprise Server 12 supportutils version 3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Information and prior versions. SUSE Linux Enterprise Server 15 supportutils version 3.1.21-150000.5.44.1 and prior versions. SUSE Linux Enterprise Server 15 SP3 supportutils version 3.1.21-150300.7.35.15.1 and prior versions.
Published: 2023-02-15T00:00:00.000Z
Updated: 2025-03-18T19:24:37.461Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8013 |
vulnerable | 2026-06-08 05:27:14.644857 |
permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim
LOW (2.2)
A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12 permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to 2013.1.7-0.6.12.1.
Published: 2020-03-02T16:35:13.188Z
Updated: 2024-09-16T17:23:50.476Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3698 |
vulnerable | 2026-06-08 05:13:55.377339 |
nagios cron job allows privilege escalation from user nagios to root
MEDIUM (5.7)
UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.
Published: 2020-02-28T13:20:14.152Z
Updated: 2024-09-16T16:33:41.138Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3693 |
vulnerable | 2026-06-08 05:13:55.353708 |
Local privilege escalation from user wwwrun to root in the packaging of mailman
HIGH (7.7)
A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15.1 allowed local attackers to escalate their privileges from user wwwrun to root. Additionally arbitrary files could be changed to group mailman. This issue affects: SUSE Linux Enterprise Server 11 mailman versions prior to 2.1.15-9.6.15.1. SUSE Linux Enterprise Server 12 mailman versions prior to 2.1.17-3.11.1. openSUSE Leap 15.1 mailman version 2.1.29-lp151.2.14 and prior versions.
Published: 2020-01-24T10:05:17.025Z
Updated: 2024-09-17T02:46:37.656Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3689 |
vulnerable | 2026-06-08 05:13:55.338996 |
nfs-utils: root-owned files stored in insecure /var/lib/nfs directory
MEDIUM (5.1)
The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.
Published: 2019-09-19T13:27:58.449Z
Updated: 2024-09-17T04:14:20.947Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3688 |
vulnerable | 2026-06-08 05:13:55.334407 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18905 |
vulnerable | 2026-06-08 05:13:12.553992 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18903 |
vulnerable | 2026-06-08 05:13:12.539732 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18902 |
vulnerable | 2026-06-08 05:13:12.539258 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18901 |
vulnerable | 2026-06-08 05:13:12.538784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18900 |
vulnerable | 2026-06-08 05:13:12.534778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18897 |
vulnerable | 2026-06-08 05:13:12.512656 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.