{"id":"CVE-2022-31254","aliases":["EUVD-2022-52831","GHSA-hqw6-rjpx-2wf4","SUSE-SU-2023:0019-1","SUSE-SU-2023:0020-1","SUSE-SU-2023:0021-1","SUSE-SU-2023:0022-1","SUSE-SU-2023:0023-1","SUSE-SU-2023:2781-1","openSUSE-SU-2024:12886-1"],"status":"published","title":"rmt-server-pubcloud allows to escalate from user _rmt to root","description":"A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-server versions prior to 2.10.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00248,"percentile":0.16271,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-276"],"published":"2023-01-03T19:16:58Z","modified":"2026-06-17T04:45:13Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"rmt-server","fixed_in":["2.10-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"rmt-server","fixed_in":["2.10-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"rmt-server","fixed_in":["2.10-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"rmt-server","fixed_in":["2.10-150300.3.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"rmt-server","fixed_in":["2.10-150300.3.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"rmt-server","fixed_in":["2.10-150300.3.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"rmt-server","fixed_in":["2.10-150300.3.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"rmt-server","fixed_in":["2.10-150300.3.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-BCL","package":"rmt-server","fixed_in":["2.10-150300.3.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"rmt-server","fixed_in":["2.10-150300.3.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"rmt-server","fixed_in":["2.10-150300.3.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"rmt-server","fixed_in":["2.10-150300.3.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"rmt-server","fixed_in":["2.10-150300.3.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"rmt-server","fixed_in":["2.10-150300.3.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"rmt-server","fixed_in":["2.10-150300.3.21.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"rmt-server","fixed_in":["2.10-150300.3.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"rmt-server","fixed_in":["2.10-150000.3.61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"rmt-server","fixed_in":["2.10-150000.3.61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"rmt-server","fixed_in":["2.10-150000.3.61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"rmt-server","fixed_in":["2.10-150000.3.61.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"rmt-server","fixed_in":["2.10-150100.3.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"rmt-server","fixed_in":["2.10-150100.3.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"rmt-server","fixed_in":["2.10-150100.3.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"rmt-server","fixed_in":["2.10-150100.3.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"rmt-server","fixed_in":["2.10-150100.3.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"rmt-server","fixed_in":["2.10-150100.3.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"rmt-server","fixed_in":["2.10-150200.3.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"rmt-server","fixed_in":["2.10-150200.3.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"rmt-server","fixed_in":["2.10-150200.3.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"rmt-server","fixed_in":["2.10-150200.3.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"rmt-server","fixed_in":["2.10-150200.3.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"rmt-server","fixed_in":["2.10-150200.3.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"rmt-server","fixed_in":["2.10-150200.3.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"rmt-server","fixed_in":["2.10-150200.3.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"rmt-server","fixed_in":["2.10-150200.3.29.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150300.3.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150300.3.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150300.3.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150300.3.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150300.3.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-BCL","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150300.3.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150300.3.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150300.3.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150300.3.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150300.3.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150300.3.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150300.3.21.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150300.3.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150000.3.61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150000.3.61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150000.3.61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150000.3.61.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150100.3.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150100.3.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150100.3.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150100.3.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150100.3.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150100.3.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150200.3.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150200.3.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150200.3.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150200.3.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150200.3.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150200.3.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150200.3.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150200.3.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150200.3.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-150500.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-150500.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-150500.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rmt-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-1.1"}]}],"bundled":3}],"products":[{"vendor":"opensuse","product":"opensuse leap 15.3"},{"vendor":"opensuse","product":"opensuse leap 15.4"},{"vendor":"opensuse","product":"rmt-server"},{"vendor":"suse","product":"suse linux enterprise server for sap 15"},{"vendor":"suse","product":"suse linux enterprise server for sap 15-sp1"},{"vendor":"suse","product":"suse manager server 4.1"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1204285","tags":["x_transferred","Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31254"},{"url":"https://github.com/advisories/GHSA-hqw6-rjpx-2wf4"},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230019-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204285","tags":["report"]},{"url":"https://bugzilla.suse.com/1204769","tags":["report"]},{"url":"https://bugzilla.suse.com/1205089","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31254","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230020-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230021-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230022-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230023-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232781-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1202053","tags":["report"]},{"url":"https://bugzilla.suse.com/1203171","tags":["report"]},{"url":"https://bugzilla.suse.com/1206593","tags":["report"]},{"url":"https://bugzilla.suse.com/1207670","tags":["report"]},{"url":"https://bugzilla.suse.com/1209096","tags":["report"]},{"url":"https://bugzilla.suse.com/1209507","tags":["report"]},{"url":"https://bugzilla.suse.com/1209825","tags":["report"]},{"url":"https://bugzilla.suse.com/1211398","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-27530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28120","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-31254","title":"rmt-server-pubcloud allows to escalate from user _rmt to root","description":"A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-server versions prior to 2.10.","status":"published","published":"2023-02-07T00:00:00Z","modified":"2025-03-25T15:40:27.938Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:34:34.940806Z"}],"euvd":[{"id":"EUVD-2022-52831","description":"A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-server versions prior to 2.10.","status":"published","published":"2023-02-07T00:00:00Z","modified":"2025-03-25T15:40:27Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:53.129601Z"}],"ghsa":[{"id":"GHSA-hqw6-rjpx-2wf4","title":"A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux...","description":"A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-server versions prior to 2.10.","status":"published","published":"2023-02-07T12:30:23Z","modified":"2023-02-22T05:07:21Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:54:12.981837Z"}],"nvd":[{"id":"CVE-2022-31254","description":"A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-server versions prior to 2.10.","status":"published","published":"2023-02-07T10:15:52.393Z","modified":"2026-06-17T04:45:13.783Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:07:36.026349Z"}],"osv":[{"id":"openSUSE-SU-2024:12886-1","title":"rmt-server-2.12-1.1 on GA media","description":"These are all security issues fixed in the rmt-server-2.12-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:44:03.544875Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:0019-1","title":"Security update for rmt-server","description":"This update for rmt-server fixes the following issues:\n\nUpdate to version 2.10:\n\n- Add option to turn off system token support (bsc#1205089)\n- Update the `last_seen_at` column on zypper service refresh\n- Do not retry to import non-existing files in air-gapped mode (bsc#1204769)\n- CVE-2022-31254: Fixed a local privilege escalation related to the packaging of rmt-server (bsc#1204285).\n","status":"published","published":"2023-01-03T19:16:58Z","modified":"2026-02-04T04:34:07.705008Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0020-1","title":"Security update for rmt-server","description":"This update for rmt-server fixes the following issues:\n\nUpdate to version 2.10:\n\n- Add option to turn off system token support (bsc#1205089)\n- Update the `last_seen_at` column on zypper service refresh\n- Do not retry to import non-existing files in air-gapped mode (bsc#1204769)\n- CVE-2022-31254: Fixed a local privilege escalation related to the packaging of rmt-server (bsc#1204285).\n","status":"published","published":"2023-01-03T19:19:16Z","modified":"2026-02-04T02:44:38.787807Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0021-1","title":"Security update for rmt-server","description":"This update for rmt-server fixes the following issues:\n\nUpdate to version 2.10:\n\n- Add option to turn off system token support (bsc#1205089)\n- Update the `last_seen_at` column on zypper service refresh\n- Do not retry to import non-existing files in air-gapped mode (bsc#1204769)\n- CVE-2022-31254: Fixed a local privilege escalation related to the packaging of rmt-server (bsc#1204285).\n","status":"published","published":"2023-01-03T19:19:53Z","modified":"2026-02-04T02:52:29.3511Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0022-1","title":"Security update for rmt-server","description":"This update for rmt-server fixes the following issues:\n\nUpdate to version 2.10:\n\n- Add option to turn off system token support (bsc#1205089)\n- Update the `last_seen_at` column on zypper service refresh\n- Do not retry to import non-existing files in air-gapped mode (bsc#1204769)\n- CVE-2022-31254: Fixed a local privilege escalation related to the packaging of rmt-server (bsc#1204285).\n","status":"published","published":"2023-01-03T19:20:22Z","modified":"2026-02-04T03:27:55.607663Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0023-1","title":"Security update for rmt-server","description":"This update for rmt-server fixes the following issues:\n\nUpdate to version 2.10:\n\n- Add option to turn off system token support (bsc#1205089)\n- Update the `last_seen_at` column on zypper service refresh\n- Do not retry to import non-existing files in air-gapped mode (bsc#1204769)\n- CVE-2022-31254: Fixed a local privilege escalation related to the packaging of rmt-server (bsc#1204285).\n","status":"published","published":"2023-01-03T19:21:03Z","modified":"2026-02-04T04:11:28.907829Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:2781-1","title":"Security update for rmt-server","description":"This update for rmt-server fixes the following issues:\n\nUpdate to version 2.13:\n\n- CVE-2023-28120: Fixed a possible XSS Security Vulnerability in bytesliced strings for html_safe (bsc#1209507).\n- CVE-2023-27530: Fixed a DoS in multipart mime parsing (bsc#1209096).\n- CVE-2022-31254: Fixed escalation vector bug from user _rmt to root in the packaging file (bsc#1204285).\n\nBug fixes:\n\n- Handle X-Original-URI header, partial fix for (bsc#1211398)\n- Force rmt-client-setup-res script to use https (bsc#1209825)\n- Mark secrets.yml.key file as part of the rpm to allow seamless downgrades (bsc#1207670)\n- Adding -f to the file move command when moving the mirrored directory to its final location (bsc#1203171) \n- Fix %post install of pubcloud subpackage reload of nginx (bsc#1206593)\n- Skip warnings regarding nokogiri libxml version mismatch (bsc#1202053)\n- Add option to turn off system token support (bsc#1205089)\n- Do not retry to import non-existing files in air-gapped mode (bsc#1204769)\n","status":"published","published":"2023-07-04T11:09:54Z","modified":"2026-02-04T04:30:12.534159Z","updated_at":"2026-11-02T15:53:53.019382Z"}]}}