The vulnerability of the SUSE Linux SMT subscription management software, related to deficiencies in authentication procedures, allows a perpetrator to replace the server.

The vulnerability of the SUSE Linux Subscription Management Tool SMT is related to deficiencies in the authentication process when the HOST header is used. Exploiting this vulnerability could allow a malicious actor to remotely replace the server...

PT-2018-1940

Name of the Vulnerable Software and Affected Versions SUSE Linux SMT versions prior to 3.0.37 Description The issue is related to insufficient authentication procedure using the HOST header in SUSE Linux Subscription Management Tool SMT, allowing a remote attacker to spoof a server. Recommendatio...