inter-server-sync vulnerabilities (SUSE)
33 vulnerabilities.
-
inter-server-syncSUSE SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint 9.3 Critical -
inter-server-syncSUSE Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs 6.9 Medium -
inter-server-syncSUSE Reflected XSS in spacewalk-java 5.6 Medium -
inter-server-syncSUSE Reflected XSS in SystemsController.java in spacewalk-java 5.6 Medium -
inter-server-syncSUSE Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web 4.6 Medium -
inter-server-syncSUSE Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web 4.6 Medium -
inter-server-syncSUSE Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes 9.8 Critical -
inter-server-syncSUSE Insecure handling SSH key in SUSE Manager when bootstrapping new clients 6.4 Medium -
inter-server-syncSUSE jose4j denial of service via specifically crafted JWE 6.5 Medium -
inter-server-syncSUSE jose4j uses weak cryptographic algorithm 7.5 High -
inter-server-syncSUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
inter-server-syncSUSE JWT token compromise can allow malicious actions including Remote Code Execution (RCE) 9.4 Critical -
inter-server-syncSUSE Drools: unsafe data deserialization in streamutils 8.1 High -
inter-server-syncSUSE SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do 2.6 Low -
inter-server-syncSUSE SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload 4.3 Medium -
inter-server-syncSUSE SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction 4.3 Medium -
inter-server-syncSUSE Stack Buffer Overflow in Woodstox 6.5 Medium -
inter-server-syncSUSE Inefficient Regular Expression Complexity in moment 7.5 High -
inter-server-syncSUSE SUMA user enumeration via weak error message 5.3 Medium -
inter-server-syncSUSE SUMA unauthenticated remote DoS via resource exhaustion 7.5 High -
inter-server-syncSUSE XML External Entity Reference in drools 9.8 Critical -
inter-server-syncSUSE Prototype Pollution in async 7.8 High -
inter-server-syncSUSE Prototype Pollution in minimist 9.8 Critical -
inter-server-syncSUSE Improper Authorization in cobbler/cobbler 8.2 High -
inter-server-syncSUSE Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config... 8.8 High -
inter-server-syncSUSE Improper Neutralization of Special Elements used in a Command in Shell-quote 9.8 Critical -
inter-server-syncSUSE Cobbler before 3.3.0 allows authorization bypass for modification of settings. 7.5 High -
inter-server-syncSUSE Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. 7.5 High -
inter-server-syncSUSE Cobbler before 3.3.0 allows log poisoning 9.8 Critical -
inter-server-syncSUSE Exposure of Resource to Wrong Sphere in salt 7.5 High -
inter-server-syncSUSE SQL injection in hibernate-core 7.4 High -
inter-server-syncSUSE Billion laughs attack in c3p0 7.5 High -
inter-server-syncSUSE XML External Entity Reference in mchange:c3p0 9.8 Critical