PT-2021-9005
CVE-2019-18906
·
تاريخ النشر
2021-06-23
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4
SUSE Manager Server 4.0 cryptctl versions prior to 2.4
Description
A vulnerability in cryptctl allows attackers with access to the hashed password to use it without having to crack it. This issue enables attackers to bypass proper authentication mechanisms.
Recommendations
For SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4, update to version 2.4 or later.
For SUSE Manager Server 4.0 cryptctl versions prior to 2.4, update to version 2.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾