Vulnerabilities > Suse > Manager Server > 4.1

DATE CVE VULNERABILITY TITLE RISK
2022-06-22 CVE-2022-21952 Missing Authentication for Critical Function vulnerability in Suse Manager Server
A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS.
network
low complexity
suse CWE-306
7.5
2022-06-22 CVE-2022-31248 Response Discrepancy Information Exposure vulnerability in Suse Manager Server 4.1/4.2
A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames.
network
low complexity
suse CWE-204
5.0
2022-04-27 CVE-2022-27239 Out-of-bounds Write vulnerability in multiple products
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
local
low complexity
samba debian suse hp fedoraproject CWE-787
7.8
2022-01-28 CVE-2021-4034 Out-of-bounds Write vulnerability in multiple products
A local privilege escalation vulnerability was found on polkit's pkexec utility.
7.8