Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2022-31248

SUMA user enumeration via weak error message

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE SUSE Manager Server 4.1

  • spacewalk-java to < 4.1.46-1affected

SUSE SUSE Manager Server 4.2

  • spacewalk-java to < 4.2.37-1affected

References