Vulnetix
Try Vulnetix Request Demo
CVE-2025-46809 PUBLISHED CVSS 6.900000095367432 MEDIUM

A Insertion of Sensitive Information into Log File vulnerability in SUSE Multi Linux Manager exposes the HTTP proxy credentials. This issue affects Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 5.0.27-150600.3.33.1; Image SLES15-SP4-Manager-Server-4-3-BYOS: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE: from ? before 4.3.87-150400.3.110.2; SUSE Manager Server Module 4.3: from ? before 4.3.87-150400.3.110.2.

EPSS 0.03% · 8.7th percentile

Risk Scores

CVSS v4.0
6.900000095367432
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS Score
0.03%
8.7th percentile

Affected Products

VendorProductVersions
SUSEImage SLES15-SP4-Manager-Server-4-3-BYOS-GCE?
SUSEImage SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2?
SUSESUSE Manager Server Module 4.3?
SUSESUSE Manager Proxy Module 4.3?
SUSEImage SLES15-SP4-Manager-Server-4-3-BYOS-EC2?
SUSEImage SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE?
SUSEImage SLES15-SP4-Manager-Server-4-3-BYOS?
SUSEContainer suse/manager/4.3/proxy-httpd:4.3.16.9.67.1?
SUSEImage SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure?
SUSEImage SLES15-SP4-Manager-Proxy-4-3-BYOS?
SUSEContainer suse/manager/5.0/x86_64/proxy-httpd:5.0.5.7.23.1?
SUSEImage SLES15-SP4-Manager-Server-4-3-BYOS-Azure?
SUSEContainer suse/manager/5.0/x86_64/server:5.0.5.7.30.1?

Timeline

References

Open in Interactive Console →