CVE-2019-18900

CVE-2019-18900 affects libzypp in SUSE CaaS Platform 3.0 and SUSE Linux Enterprise Server 12/15, where an incorrect default-permissions issue could allow local attackers to read a cookie store used by libzypp and expose private cookies. Affected versions include: SUSE CaaS Platform 3.0 libzypp &l...

CVE-2019-18900 libzypp stores cookies world readable

: Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform 3.0 libzypp version...

CVE-2019-18900

: Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform 3.0 libzypp version...

CVE-2019-3682

The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node...

Code injection

The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node...

CVE-2019-3682 Insecure API port exposed to all Master Node guest containers

The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node...

CVE-2019-3682

The CVE-2019-3682 entry affects the docker-kubic package in SUSE CaaS Platform 3.0, specifically before 17.09.1_ce-7.6.1. The issue allows access to an insecure API locally on the Kubernetes master node, exposing the system to high-impact confidentiality, integrity, and availability risks (CVSSv3...

SUSE SLED12 / SLES12 Security Update : bzip2 (SUSE-SU-2019:2013-1)

This update for bzip2 fixes the following issues : Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities with files that used many selectors bsc1139083. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

Unspecified Vulnerability in Micro Focus SUSE CaaS Platform

Micro Focus SUSE CaaS Platform is a suite of enterprise-grade container management solutions from Micro Focus UK. The product is designed to deploy, manage and scale container-based applications and services. An unspecified vulnerability exists in SUSE CaaS Platform version 3.0. An attacker could...

SUSE SLED12 / SLES12 Security Update : rsyslog (SUSE-SU-2018:2038-1)

This update for rsyslog fixes the following issues: The following security vulnerability was addressed : - CVE-2015-3243: Make sure that log files are not created world-readable bsc935393 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE SLES12 Security Update : CaaS Platform 2.0 images (SUSE-SU-2018:0053-1)

The Docker images provided with SUSE CaaS Platform 2.0 have been updated to include the following updates: binutils : - Update to version 2.29 - 18750 bsc1030296 CVE-2014-9939 - 20891 bsc1030585 CVE-2017-7225 - 20892 bsc1030588 CVE-2017-7224 - 20898 bsc1030589 CVE-2017-7223 - 20905 bsc1030584...