Description (CNA)
A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE Manager Server 4.0 cryptctl versions prior to 2.4.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SUSE / SUSE Linux Enterprise Server for SAP 12-SP5 | affected cryptctl before 2.4 |
| SUSE / SUSE Manager Server 4.0 | affected cryptctl before 2.4 |
CWE
CWE-287
References
ADP enrichment
No English description supplied.