spacewalk-setup vulnerabilities (SUSE)
29 vulnerabilities.
-
spacewalk-setupSUSE Insecure handling SSH key in SUSE Manager when bootstrapping new clients 6.4 Medium -
spacewalk-setupSUSE jose4j uses weak cryptographic algorithm 7.5 High -
spacewalk-setupSUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
spacewalk-setupSUSE JWT token compromise can allow malicious actions including Remote Code Execution (RCE) 9.4 Critical -
spacewalk-setupSUSE SUMA user enumeration via weak error message 5.3 Medium -
spacewalk-setupSUSE SUMA unauthenticated remote DoS via resource exhaustion 7.5 High -
spacewalk-setupSUSE XML External Entity Reference in drools 9.8 Critical -
spacewalk-setupSUSE Improper Authorization in cobbler/cobbler 8.2 High -
spacewalk-setupSUSE pgjdbc Arbitrary File Write Vulnerability 9.8 Critical -
spacewalk-setupSUSE Uncontrolled Resource Consumption in promhttp 7.5 High -
spacewalk-setupSUSE Unchecked Class Instantiation when providing Plugin Classes 7.0 High -
spacewalk-setupSUSE Cobbler before 3.3.0 allows authorization bypass for modification of settings. 7.5 High -
spacewalk-setupSUSE Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. 7.5 High -
spacewalk-setupSUSE Cobbler before 3.3.0 allows log poisoning 9.8 Critical -
spacewalk-setupSUSE SQL injection in hibernate-core 7.4 High -
spacewalk-setupSUSE salt-api is accessible to every user on SUSE Manager Server 9.3 Critical -
spacewalk-setupSUSE SQL Injection in Hibernate ORM 6.5 Medium -
spacewalk-setupSUSE Improper Restriction of XML External Entity Reference 7.7 High -
spacewalk-setupSUSE jQuery has a potential XSS vulnerability 6.9 Medium -
spacewalk-setupSUSE Recommended update for SUSE Manager Server 3.2 No score -
spacewalk-setupSUSE A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity... 8.6 High -
spacewalk-setupSUSE Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS) 4.2 Medium -
spacewalk-setupSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 8.8 High -
spacewalk-setupSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 7.8 High -
spacewalk-setupSUSE Allocation of Resources Without Limits or Throttling in Apache Tika 6.5 Medium -
spacewalk-setupSUSE Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser 6.5 Medium -
spacewalk-setupSUSE High severity vulnerability that affects org.apache.tika:tika-core 7.5 High -
spacewalk-setupSUSE Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially... 7.5 High -
spacewalk-setupSUSE It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform... 6.5 Medium