Vulnerabilities > CVE-2019-18906 - Unspecified vulnerability in Opensuse Cryptctl
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE Manager Server 4.0 cryptctl versions prior to 2.4.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 7 | |
| Application | 1 | |
| OS | 1 |