Approved changes feed: RSS · Atom

cpe:2.3:a:suse:suse_linux_enterprise_server_for_sap_12-sp5:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSuse (ec535637-432e-5a38-96dd-4ec1e0138f73)
ProductSuse Linux Enterprise Server For Sap 12 Sp5 (8415cd49-3502-5693-a482-26a66426f19a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-45153 vulnerable 2026-06-08 05:50:35.828955 saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls
HIGH (7)
An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e.
Published: 2023-02-15T00:00:00.000Z
Updated: 2025-03-18T19:25:05.374Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18906 vulnerable 2026-06-08 05:13:12.557612 cryptctl: client side password hashing is equivalent to clear text password storage
CRITICAL (9.8)
A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE Manager Server 4.0 cryptctl versions prior to 2.4.
Published: 2021-06-30T08:35:12.084Z
Updated: 2024-09-16T21:03:41.876Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.