CVE-2022-31248 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-31248 PUBLISHED CVSS 5.300000190734863 MEDIUM

A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1.

EPSS 0.19% · 40.5th percentile

Risk Scores

CVSS v3.1

5.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS Score

0.19%

40.5th percentile

Affected Products

Vendor	Product	Versions
SUSE	SUSE Manager Server 4.2	spacewalk-java
suse	manager_server	4.1, 4.2
SUSE	SUSE Manager Server 4.1	spacewalk-java

Timeline

Jun 22, 2022 CVE Published
Jun 22, 2022 PoC Published
Jun 23, 2022 EPSS Score
Aug 10, 2022 EPSS Score
Sep 26, 2022 EPSS Score
Nov 13, 2022 EPSS Score
Dec 30, 2022 EPSS Score
Feb 15, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 3, 2023 EPSS Score
May 20, 2023 EPSS Score
Jul 7, 2023 EPSS Score

References

Open in Interactive Console →