{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2025-46811",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2025-46811",
    "idYear": 2025,
    "status": "PUBLISHED",
    "publishedAt": "2025-07-30T14:20:53.828Z",
    "updatedAt": "2026-02-26T17:50:03.837Z",
    "importedAt": "2026-10-24T01:57:34.152Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint",
      "summary": "A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability to connect to port 443 of SUSE Manager is able to run any command as root on any client. This issue affects Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 5.0.27-150600.3.33.1; Image SLES15-SP4-Manager-Server-4-3-BYOS: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE: from ? before 4.3.87-150400.3.110.2; SUSE Manager Server Module 4.3: from ? before 4.3.87-150400.3.110.2.",
      "affected": [
        {
          "vendor": "SUSE",
          "product": "Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1",
          "packageName": "spacewalk-java",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "?",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "5.0.27-150600.3.33.1"
            }
          ]
        },
        {
          "vendor": "SUSE",
          "product": "Image SLES15-SP4-Manager-Server-4-3-BYOS",
          "packageName": "spacewalk-java",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "?",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "4.3.87-150400.3.110.2"
            }
          ]
        },
        {
          "vendor": "SUSE",
          "product": "Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure",
          "packageName": "spacewalk-java",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "?",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "4.3.87-150400.3.110.2"
            }
          ]
        },
        {
          "vendor": "SUSE",
          "product": "Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2",
          "packageName": "spacewalk-java",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "?",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "4.3.87-150400.3.110.2"
            }
          ]
        },
        {
          "vendor": "SUSE",
          "product": "Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE",
          "packageName": "spacewalk-java",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "?",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "4.3.87-150400.3.110.2"
            }
          ]
        },
        {
          "vendor": "SUSE",
          "product": "SUSE Manager Server Module 4.3",
          "packageName": "spacewalk-java",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "?",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "4.3.87-150400.3.110.2"
            }
          ]
        }
      ]
    }
  }
}