Approved changes feed: RSS · Atom

cpe:2.3:o:suse:caas_platform:3.0:*:*:*:*:*:*:*

part: o version: 3.0 update: *

VendorSuse (ec535637-432e-5a38-96dd-4ec1e0138f73)
ProductCaas Platform (5f41a830-e22b-53ab-86f6-e875a4d06e4b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-18900 not_vulnerable 2026-06-08 05:13:12.536634 libzypp stores cookies world readable
MEDIUM (4)
: Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform 3.0 libzypp versions prior to 16.21.2-27.68.1. SUSE Linux Enterprise Server 12 libzypp versions prior to 16.21.2-2.45.1. SUSE Linux Enterprise Server 15 17.19.0-3.34.1.
Published: 2020-01-24T15:15:15.806Z
Updated: 2024-09-16T20:52:26.745Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.