CVE-2022-21952 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-21952 PUBLISHED CVSS 7.5 HIGH

A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.

EPSS 0.36% · 58.1th percentile

Risk Scores

CVSS v3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

0.36%

58.1th percentile

Affected Products

Vendor	Product	Versions
SUSE	SUSE Manager Server 4.2	spacewalk-java
suse	manager_server	4.1, 4.2
SUSE	SUSE Manager Server 4.1	spacewalk-java

Timeline

Jun 22, 2022 CVE Published
Jun 22, 2022 PoC Published
Jun 23, 2022 EPSS Score
Aug 10, 2022 EPSS Score
Sep 26, 2022 EPSS Score
Nov 13, 2022 EPSS Score
Dec 30, 2022 EPSS Score
Feb 15, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 3, 2023 EPSS Score
May 20, 2023 EPSS Score
Jul 7, 2023 EPSS Score

References

Open in Interactive Console →