CVE-2025-46809

Name of the Vulnerable Software and Affected Versions SUSE Multi Linux Manager versions prior to 5.0.27-150600.3.33.1 Image SLES15-SP4-Manager-Server-4-3-BYOS versions prior to 4.3.87-150400.3.110.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure versions prior to 4.3.87-150400.3.110.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 versions prior to 4.3.87-150400.3.110.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE versions prior to 4.3.87-150400.3.110.2 SUSE Manager Server Module 4.3 versions prior to 4.3.87-150400.3.110.2

Description A vulnerability exists where sensitive information, specifically HTTP proxy credentials, is inserted into log files. This exposure can compromise the confidentiality of these credentials.

Recommendations Update Container suse/manager/5.0/x86 64/server to version 5.0.27-150600.3.33.1 or later. Update Image SLES15-SP4-Manager-Server-4-3-BYOS to version 4.3.87-150400.3.110.2 or later. Update Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure to version 4.3.87-150400.3.110.2 or later. Update Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 to version 4.3.87-150400.3.110.2 or later. Update Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE to version 4.3.87-150400.3.110.2 or later. Update SUSE Manager Server Module 4.3 to version 4.3.87-150400.3.110.2 or later.