← CVE Intelligence

CVE-2022-21952

SUMA unauthenticated remote DoS via resource exhaustion PUBLISHED

Description (CNA)

A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.

Affected (CNA)

Vendor / productVersions
SUSE / SUSE Manager Server 4.1affected spacewalk-java before 4.1.46
SUSE / SUSE Manager Server 4.2affected spacewalk-java before 4.2.37

CWE

CWE-306, CWE-770

References

ADP enrichment

CVE

No English description supplied.