Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseOPENSUSE-SU-2019:1495-1
HistoryJun 03, 2019 - 12:00 a.m.

Recommended update for sles12sp3-docker-image, sles12sp4-image, system-user-root (important)

2019-06-0300:00:00
lists.opensuse.org
135

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

82.9%

JSON

An update that fixes one vulnerability is now available.

Description:

This update for sles12sp3-docker-image, sles12sp4-image, system-user-root
fixes the following issues:

  • CVE-2019-5021: Include an invalidated root password by default, not an
    empty one (bsc#1134524)

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.1:

    zypper in -t patch openSUSE-2019-1495=1

  • openSUSE Leap 15.0:

    zypper in -t patch openSUSE-2019-1495=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.1noarch< - openSUSE Leap 15.1 (noarch):- openSUSE Leap 15.1 (noarch):.noarch.rpm
openSUSE Leap15.0noarch< - openSUSE Leap 15.0 (noarch):- openSUSE Leap 15.0 (noarch):.noarch.rpm

Related

openvas 6
threatpost 1
qualysblog 2
attackerkb 1
cve 5
nessus 3
talos 1
f5 1
prion 5
githubexploit 1
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2019:1368-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:4011-1)
2021-12-14 00:00:00
openSUSE: Security Advisory for Recommended (openSUSE-SU-2019:1495-1)
2019-06-04 00:00:00
threatpost
threatpost
Alpine Linux Docker Images Shipped for 3 Years with Root Accounts Unlocked
2019-05-09 17:06:14
qualysblog
qualysblog
Graboid: Revenge of the Worms
2019-10-17 14:00:43
Alpine Docker Image Vulnerability (CVE-2019-5021): How to Detect and Fix
2019-06-11 15:00:51
attackerkb
attackerkb
CVE-2019-5021
2019-05-08 00:00:00
cve
cve
CVE-2019-5021
2019-05-08 17:29:00
CVE-2020-35188
2020-12-17 02:15:00
CVE-2020-29589
2020-12-11 16:15:00
nessus
nessus
openSUSE Security Update : system-user-root (openSUSE-2019-1495)
2019-06-05 00:00:00
SUSE SLES12 Security Update : sles12sp2-docker-image (SUSE-SU-2021:4011-1)
2021-12-14 00:00:00
Unpassworded 'root' Account
2003-02-20 00:00:00
talos
talos
Alpine Linux Docker Image root User Hard-Coded Credential Vulnerability
2019-05-08 00:00:00
f5
f5
K25551452 : Alpine Linux Docker image vulnerability CVE-2019-5021
2019-06-24 00:00:00
prion
prion
Authentication flaw
2019-05-08 17:29:00
Design/Logic Flaw
2020-12-11 15:15:00
Design/Logic Flaw
2020-12-17 02:15:00
githubexploit
githubexploit
Exploit for CVE-2019-5021
2021-07-02 10:10:26

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

82.9%

JSON
Related for OPENSUSE-SU-2019:1495-1
openvas6threatpost1qualysblog2attackerkb1cve5nessus3talos1f51prion5githubexploit1