Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-31219 State: PUBLISHED Published: 2022-06-15T18:48:43.674Z Last Updated: 2025-04-23T18:14:23.909Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: ABB Products: Drive Composer entry, Drive Composer pro, ABB Automation Builder, Mint WorkBench Problem Types: CWE-59 Description: Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation on the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
CVE ID: CVE-2022-31220 State: PUBLISHED Published: 2022-09-12T18:35:17.543530Z Last Updated: 2024-09-16T16:28:32.072Z Severity: LOW (CVSS 3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L) Vendors: Dell Products: CPG BIOS Problem Types: CWE-1038 Description: Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the state of the system or cause unexpected failures. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000202196
CVE ID: CVE-2022-31221 State: PUBLISHED Published: 2022-09-12T18:35:18.411393Z Last Updated: 2024-09-17T00:11:09.228Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: CPG BIOS Problem Types: CWE-200 Description: Dell BIOS versions contain an Information Exposure vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order access sensitive state information on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000202196
CVE ID: CVE-2022-31222 State: PUBLISHED Published: 2022-09-12T18:35:19.296204Z Last Updated: 2024-09-17T03:54:45.001Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: CPG BIOS Problem Types: CWE-401 Description: Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by consuming excess memory in order to cause the application to crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000202196
CVE ID: CVE-2022-31223 State: PUBLISHED Published: 2022-09-12T18:35:20.164940Z Last Updated: 2024-09-16T22:36:37.761Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: CPG BIOS Problem Types: CWE-158 Description: Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by sending unexpected null bytes in order to read memory on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000202196
CVE ID: CVE-2022-31224 State: PUBLISHED Published: 2022-09-12T18:35:20.980464Z Last Updated: 2024-09-17T02:01:23.598Z Severity: LOW (CVSS 2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: CPG BIOS Problem Types: CWE-1247 Description: Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by triggering a fault condition in order to change the behavior of the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000202196
CVE ID: CVE-2022-31225 State: PUBLISHED Published: 2022-09-12T18:35:21.789609Z Last Updated: 2024-09-16T23:10:22.125Z Severity: LOW (CVSS 3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L) Vendors: Dell Products: CPG BIOS Problem Types: CWE-252 Description: Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the state of the system or cause unexpected failures. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000202196
CVE ID: CVE-2022-31226 State: PUBLISHED Published: 2022-09-12T18:35:22.684202Z Last Updated: 2024-09-16T23:05:44.241Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-121 Description: Dell BIOS versions contain a Stack-based Buffer Overflow vulnerability. A local authenticated malicious user could potentially exploit this vulnerability by sending excess data to a function in order to gain arbitrary code execution on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000202196
CVE ID: CVE-2022-31227 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-31228 State: PUBLISHED Published: 2022-10-12T19:25:32.974Z Last Updated: 2025-05-15T17:54:08.184Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: XtremIO Problem Types: CWE-307 Description: Dell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability. A remote unauthenticated attacker can potentially exploit this vulnerability and gain access to an admin account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000204112/dsa-2022-145-dell-emc-xtremeio-for-ssh-and-web-ui-vulnerability
CVE ID: CVE-2022-31229 State: PUBLISHED Published: 2022-06-28T18:40:11.660865Z Last Updated: 2024-09-17T04:13:42.167Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-209 Description: Dell PowerScale OneFS, 8.2.x through 9.3.0.x, contain an error message with sensitive information. An administrator could potentially exploit this vulnerability, leading to disclosure of sensitive information. This sensitive information can be used to access sensitive resources. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000200681/dsa-2022-118-dell-emc-powerscale-o
E Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000200681/dsa-2022-118-dell-emc-powerscale-onefs-security-update?lang=en
CVE ID: CVE-2022-31230 State: PUBLISHED Published: 2022-06-28T18:40:13.076285Z Last Updated: 2024-09-16T18:18:12.648Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-327 Description: Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain broken or risky cryptographic algorithm. A remote unprivileged malicious attacker could potentially exploit this vulnerability, leading to full system access. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000200681/dsa-2022-118-dell-emc-powerscale-onefs-security-update
CVE ID: CVE-2022-31232 State: PUBLISHED Published: 2022-08-30T20:25:13.264002Z Last Updated: 2024-09-17T04:09:28.170Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Dell Products: Smart Fabric Storage Software Problem Types: CWE-78 Description: SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access and perform actions on the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201667/dsa-2022-156-dell-emc-smartfabric-storage-software-security-update-for-multiple-com
ll.com/support/kbdoc/en-us/000201667/dsa-2022-156-dell-emc-smartfabric-storage-software-security-update-for-multiple-component-vulnerabilities
CVE ID: CVE-2022-31233 State: PUBLISHED Published: 2022-08-31T20:05:14.863050Z Last Updated: 2024-09-16T16:37:57.813Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N) Vendors: Dell Products: Unisphere for PowerMax Problem Types: CWE-602 Description: Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000200975
CVE ID: CVE-2022-31234 State: PUBLISHED Published: 2022-07-20T20:55:18.328486Z Last Updated: 2024-09-16T16:24:01.262Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerStore Problem Types: CWE-307 Description: Dell EMC PowerStore, contain(s) an Improper Restriction of Excessive Authentication Attempts Vulnerability in PowerStore Manager GUI. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is possible if weak passwords are used by users. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000201283
CVE ID: CVE-2022-31237 State: PUBLISHED Published: 2022-08-22T16:50:12.251623Z Last Updated: 2024-09-16T17:29:10.826Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-281 Description: Dell PowerScale OneFS, versions 9.2.0 up to and including 9.2.1.12 and 9.3.0.5 contain an improper preservation of permissions vulnerability in SyncIQ. A low privileged local attacker may potentially exploit this vulnerability, leading to limited information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000201094/dsa-2022-149-dell-emc-powerscale-onefs-security-
ainer: References: - https://www.dell.com/support/kbdoc/en-us/000201094/dsa-2022-149-dell-emc-powerscale-onefs-security-update?lang=en
CVE ID: CVE-2022-31238 State: PUBLISHED Published: 2022-08-22T16:50:30.054315Z Last Updated: 2024-09-16T20:27:36.568Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE 214: Invocation of Process Using Visible Sensitive Information Description: Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain a process invoked with sensitive information vulnerability. A CLI user may potentially exploit this vulnerability, leading to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-gh/000201094
ure. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-gh/000201094/dsa-2022-149-dell-emc-powerscale-onefs-security-update
CVE ID: CVE-2022-31239 State: PUBLISHED Published: 2022-10-21T18:05:26.213Z Last Updated: 2025-05-07T15:53:58.637Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-532 Description: Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, and 9.3.0.6, contain sensitive data in log files vulnerability. A privileged local user may potentially exploit this vulnerability, leading to disclosure of this sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000201094/dsa-2022-149-dell-emc-powerscale-onefs
DP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000201094/dsa-2022-149-dell-emc-powerscale-onefs-security-update?lang=en
CVE ID: CVE-2022-31242 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2022-31243 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T19:10:05.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Update description and links DMA transactions which are targeted at input buffers used for the software SMI handler used by the FvbServicesRuntimeDxe driver could cause SMRAM corruption through a TOCTOU attack.. "DMA transactions which are targeted at input buffers used for the software SMI handler used by the FvbServicesRuntimeDxe driver could cause SMRAM corruption. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. Fixed in Kernel 5.2: 05.27.21. Kernel 5.
engineering based on the general description provided by Intel's iSTARE group. Fixed in Kernel 5.2: 05.27.21. Kernel 5.3: 05.36.21. Kernel 5.4: 05.44.21. Kernel 5.5: 05.52.21 https://www.insyde.com/security-pledge/SA-2022044 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022044 - https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf
CVE ID: CVE-2022-31244 State: PUBLISHED Published: 2023-04-25T00:00:00.000Z Last Updated: 2025-02-03T21:00:16.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nokia OneNDS 17r2 has Insecure Permissions vulnerability that allows for privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nokia.com/networks/products/one-nds/ - https://packetstormsecurity.com/files/171970/Nokia-OneNDS-17-Insecure-Permissions-Privilege-Escalation.html
CVE ID: CVE-2022-31245 State: PUBLISHED Published: 2022-05-20T14:20:21 Last Updated: 2024-08-03T07:11:39.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug option in conjunction with the ---PIPEMESS option in Sync Jobs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mailcow/mailcow-dockerized/releases/tag/2022-05d - https://github.com/ly1g3/Mailcow-CVE-2022-31245
CVE ID: CVE-2022-31246 State: PUBLISHED Published: 2022-06-17T13:39:22 Last Updated: 2024-08-03T07:11:39.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment request (e.g., within QR code data). On Windows, this can lead to capture of credentials over SMB. On Linux and UNIX, it can lead to a denial of service by specifying the /dev/zero filename. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spesmilo/electrum/security/advisories/GHSA-4fh4-hx35-r355 - https://twitter.com/ElectrumWallet/status/1534540879905665028
CVE ID: CVE-2022-31247 State: PUBLISHED Published: 2022-09-07T08:20:18.025806Z Last Updated: 2024-09-16T19:52:12.881Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: SUSE Products: Rancher Problem Types: CWE-285 Description: An Improper Authorization vulnerability in SUSE Rancher, allows any user who has permissions to create/edit cluster role template bindings or project role template bindings (such as cluster-owner, manage cluster members, project-owner and manage project members) to gain owner permission in another project in the same cluster or in another project on a different downstream cluster. This issue affects: SUSE Rancher Rancher versions prior
cluster or in another project on a different downstream cluster. This issue affects: SUSE Rancher Rancher versions prior to 2.6.7; Rancher versions prior to 2.5.16. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1199730 - https://github.com/rancher/rancher/security/advisories/GHSA-6x34-89p7-95wg
CVE ID: CVE-2022-31248 State: PUBLISHED Published: 2022-06-22T10:05:13.408202Z Last Updated: 2024-09-16T16:22:26.146Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SUSE Products: SUSE Manager Server 4.1, SUSE Manager Server 4.2 Problem Types: CWE-204 Description: A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1. Additional Analyst Notes: - CVE Program Container: References: - https://bu
2 spacewalk-java versions prior to 4.2.37-1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1199629
CVE ID: CVE-2022-31249 State: PUBLISHED Published: 2023-02-07T00:00:00.000Z Last Updated: 2025-03-25T15:40:55.972Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SUSE Products: Rancher Problem Types: CWE-78 Description: A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in wrangler of SUSE Rancher allows remote attackers to inject commands in the underlying host via crafted commands passed to Wrangler. This issue affects: SUSE Rancher wrangler version 0.7.3 and prior versions; wrangler version 0.8.4 and prior versions; wrangler version 1.0.0 and prior versions. Additional Analyst Notes: - CVE Program Con
version 0.8.4 and prior versions; wrangler version 1.0.0 and prior versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1200299
CVE ID: CVE-2022-31250 State: PUBLISHED Published: 2022-07-20T07:55:11.167227Z Last Updated: 2024-09-17T01:06:35.227Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: openSUSE Products: Tumbleweed Problem Types: CWE-59 Description: A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime user to root. This issue affects: openSUSE Tumbleweed keylime versions prior to 6.4.2-1.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1200885
CVE ID: CVE-2022-31251 State: PUBLISHED Published: 2022-09-07T08:55:09.171815Z Last Updated: 2024-09-17T01:10:54.793Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: SUSE Products: openSUSE Factory Problem Types: CWE-276 Description: A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1201674
CVE ID: CVE-2022-31252 State: PUBLISHED Published: 2022-10-06T17:14:05.294457Z Last Updated: 2024-09-16T18:40:06.727Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: SUSE, openSUSE Products: SUSE Linux Enterprise Server 12-SP5, openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 Problem Types: CWE-863 Description: A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with access to a group what can write to a location included in the path to a privileged binary to influence
attackers with access to a group what can write to a location included in the path to a privileged binary to influence path resolution. This issue affects: SUSE Linux Enterprise Server 12-SP5 permissions versions prior to 20170707. openSUSE Leap 15.3 permissions versions prior to 20200127. openSUSE Leap 15.4 permissions versions prior to 20201225. openSUSE Leap Micro 5.2 permissions versions prior to 20181225. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1203018
CVE ID: CVE-2022-31253 State: PUBLISHED Published: 2022-11-09T13:50:10.848Z Last Updated: 2025-05-01T14:21:38.503Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: openSUSE Products: Factory Problem Types: CWE-426 Description: A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior to 2.6.3-404.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1202931
CVE ID: CVE-2022-31254 State: PUBLISHED Published: 2023-02-07T00:00:00.000Z Last Updated: 2025-03-25T15:40:27.938Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SUSE, openSUSE Products: SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1, openSUSE Leap 15.3, openSUSE Leap 15.4 Problem Types: CWE-276 Description: A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalat
anager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-server versions prior to 2.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1204285
CVE ID: CVE-2022-31255 State: PUBLISHED Published: 2022-11-10T07:30:16.818Z Last Updated: 2025-04-30T19:55:40.615Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SUSE Products: SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 Problem Types: CWE-22 Description: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to read files available to the
rise Module for SUSE Manager Server 4.3, SUSE Manager Server 4.2 allows remote attackers to read files available to the user running the process, typically tomcat. This issue affects: SUSE Linux Enterprise Module for SUSE Manager Server 4.2 hub-xmlrpc-api-0.7-150300.3.9.2, inter-server-sync-0.2.4-150300.8.25.2, locale-formula-0.3-150300.3.3.2, py27-compat-salt-3000.3-150300.7.7.26.2, python-urlgrabber-3.10.2.1py2_3-150300.3.3.2, spacecmd-4.2.20-150300.4.30.2, spacewalk-backend-4.2.25-150300.4.32.4, spacewalk-client-tools-4.2.21-150300.4.27.3, spacewalk-java-4.2.43-150300.3.48.2, spacewalk-utils-4.2.18-150300.3.21.2, spacewalk-web-4.2.30-150300.3.30.3, susemanager-4.2.38-150300.3.44.3, susema
48.2, spacewalk-utils-4.2.18-150300.3.21.2, spacewalk-web-4.2.30-150300.3.30.3, susemanager-4.2.38-150300.3.44.3, susemanager-doc-indexes-4.2-150300.12.36.3, susemanager-docs_en-4.2-150300.12.36.2, susemanager-schema-4.2.25-150300.3.30.3, susemanager-sls versions prior to 4.2.28. SUSE Linux Enterprise Module for SUSE Manager Server 4.3 spacewalk-java versions prior to 4.3.39. SUSE Manager Server 4.2 release-notes-susemanager versions prior to 4.2.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1204543