cveboard RSS feed

CVE-2025-46811

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint

A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability to connect to port 443 of SUSE Manager is able to run any command as root on any client. This issue affects Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 5.0.27-150600.3.33.1; Image SLES15-SP4-Manager-Server-4-3-BYOS: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE: from ? before 4.3.87-150400.3.110.2; SUSE Manager Server Module 4.3: from ? before 4.3.87-150400.3.110.2.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1

Vendor
SUSE
Product
Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1
Platforms
Unknown
Default status
unaffected
Package
spacewalk-java
Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
?affectedcustom5.0.27-150600.3.33.1UnavailableNone listed

Image SLES15-SP4-Manager-Server-4-3-BYOS

Vendor
SUSE
Product
Image SLES15-SP4-Manager-Server-4-3-BYOS
Platforms
Unknown
Default status
unaffected
Package
spacewalk-java
Image SLES15-SP4-Manager-Server-4-3-BYOS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
?affectedcustom4.3.87-150400.3.110.2UnavailableNone listed

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

Vendor
SUSE
Product
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
Platforms
Unknown
Default status
unaffected
Package
spacewalk-java
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
?affectedcustom4.3.87-150400.3.110.2UnavailableNone listed

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

Vendor
SUSE
Product
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2
Platforms
Unknown
Default status
unaffected
Package
spacewalk-java
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
?affectedcustom4.3.87-150400.3.110.2UnavailableNone listed

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

Vendor
SUSE
Product
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE
Platforms
Unknown
Default status
unaffected
Package
spacewalk-java
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
?affectedcustom4.3.87-150400.3.110.2UnavailableNone listed

SUSE Manager Server Module 4.3

Vendor
SUSE
Product
SUSE Manager Server Module 4.3
Platforms
Unknown
Default status
unaffected
Package
spacewalk-java
SUSE Manager Server Module 4.3 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
?affectedcustom4.3.87-150400.3.110.2UnavailableNone listed