← CVE Intelligence

CVE-2022-31248

SUMA user enumeration via weak error message PUBLISHED

Description (CNA)

A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1.

Affected (CNA)

Vendor / productVersions
SUSE / SUSE Manager Server 4.1affected spacewalk-java before 4.1.46-1
SUSE / SUSE Manager Server 4.2affected spacewalk-java before 4.2.37-1

CWE

CWE-204

References

ADP enrichment

CVE

No English description supplied.