CVE-2022-21952
Fixed in a distro release EPSS 2%CVSS 7.5
A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.
Products: SUSE Manager Server 4.1, SUSE Manager Server 4.2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Manager Proxy 4.1 | release-notes-susemanager-proxy | 4.1.15-150200.3.56.1 |
| SUSE Manager Proxy 4.2 | release-notes-susemanager-proxy | 4.2.7-150300.3.31.2 |
| SUSE Manager Proxy Module 4.2 | spacecmd | 4.2.17-150300.4.21.4 |
| SUSE Manager Proxy Module 4.2 | spacewalk-backend | 4.2.22-150300.4.23.1 |
| SUSE Manager Proxy Module 4.2 | spacewalk-certs-tools | 4.2.16-150300.3.18.3 |
| SUSE Manager Proxy Module 4.2 | spacewalk-web | 4.2.27-150300.3.21.7 |
| SUSE Manager Proxy Module 4.2 | supportutils-plugin-salt | 1.2.0-150300.3.3.1 |
| SUSE Manager Retail Branch Server 4.1 | release-notes-susemanager-proxy | 4.1.15-150200.3.56.1 |
| SUSE Manager Retail Branch Server 4.2 | release-notes-susemanager-proxy | 4.2.7-150300.3.31.2 |
| SUSE Manager Server 4.1 | release-notes-susemanager | 4.1.15-150200.3.80.1 |
| SUSE Manager Server 4.2 | release-notes-susemanager | 4.2.7-150300.3.44.1 |
| SUSE Manager Server Module 4.1 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150200.6.12.2 |
| SUSE Manager Server Module 4.1 | golang-github-lusitaniae-apache_exporter | 0.7.0-150200.2.6.2 |
| SUSE Manager Server Module 4.1 | golang-github-prometheus-node_exporter | 1.3.0-150200.3.9.3 |
| SUSE Manager Server Module 4.1 | patterns-suse-manager | 4.1-150200.6.12.2 |
| SUSE Manager Server Module 4.1 | postgresql-jdbc | 42.2.10-150200.3.8.2 |
| SUSE Manager Server Module 4.1 | prometheus-exporters-formula | 0.9.5-150200.3.31.2 |
| SUSE Manager Server Module 4.1 | prometheus-formula | 0.3.7-150200.3.21.2 |
| SUSE Manager Server Module 4.1 | py27-compat-salt | 3000.3-150200.6.24.2 |
| SUSE Manager Server Module 4.1 | spacecmd | 4.1.18-150200.4.39.3 |
| SUSE Manager Server Module 4.1 | spacewalk-backend | 4.1.31-150200.4.50.4 |
| SUSE Manager Server Module 4.1 | spacewalk-java | 4.1.46-150200.3.71.5 |
| SUSE Manager Server Module 4.1 | spacewalk-setup | 4.1.11-150200.3.18.2 |
| SUSE Manager Server Module 4.1 | spacewalk-utils | 4.1.20-150200.3.30.2 |
| SUSE Manager Server Module 4.1 | spacewalk-web | 4.1.34-150200.3.47.6 |
| SUSE Manager Server Module 4.1 | subscription-matcher | 0.28-150200.3.15.2 |
| SUSE Manager Server Module 4.1 | susemanager | 4.1.36-150200.3.52.1 |
| SUSE Manager Server Module 4.1 | susemanager-doc-indexes | 4.1-150200.11.55.4 |
| SUSE Manager Server Module 4.1 | susemanager-docs_en | 4.1-150200.11.55.2 |
| SUSE Manager Server Module 4.1 | susemanager-schema | 4.1.26-150200.3.45.4 |
| SUSE Manager Server Module 4.1 | susemanager-sls | 4.1.36-150200.3.64.2 |
| SUSE Manager Server Module 4.2 | inter-server-sync | 0.2.2-150300.8.17.1 |
| SUSE Manager Server Module 4.2 | prometheus-formula | 0.6.2-150300.3.14.1 |
| SUSE Manager Server Module 4.2 | salt-netapi-client | 0.19.0-150300.3.6.1 |
| SUSE Manager Server Module 4.2 | smdba | 1.7.10-0.150300.3.6.1 |
| SUSE Manager Server Module 4.2 | spacecmd | 4.2.17-150300.4.21.4 |
| SUSE Manager Server Module 4.2 | spacewalk-backend | 4.2.22-150300.4.23.1 |
| SUSE Manager Server Module 4.2 | spacewalk-certs-tools | 4.2.16-150300.3.18.3 |
| SUSE Manager Server Module 4.2 | spacewalk-java | 4.2.38-150300.3.35.1 |
| SUSE Manager Server Module 4.2 | spacewalk-utils | 4.2.16-150300.3.15.5 |
| SUSE Manager Server Module 4.2 | spacewalk-web | 4.2.27-150300.3.21.7 |
| SUSE Manager Server Module 4.2 | supportutils-plugin-salt | 1.2.0-150300.3.3.1 |
| SUSE Manager Server Module 4.2 | susemanager | 4.2.32-150300.3.31.1 |
| SUSE Manager Server Module 4.2 | susemanager-doc-indexes | 4.2-150300.12.27.6 |
| SUSE Manager Server Module 4.2 | susemanager-docs_en | 4.2-150300.12.27.1 |
| SUSE Manager Server Module 4.2 | susemanager-schema | 4.2.22-150300.3.21.6 |
| SUSE Manager Server Module 4.2 | susemanager-sls | 4.2.23-150300.3.25.4 |
| SUSE Manager Server Module 4.2 | susemanager-sync-data | 4.2.12-150300.3.18.3 |
| SUSE Manager Server Module 4.2 | virtual-host-gatherer | 1.0.23-150300.3.3.1 |