VDB
SUSE-SU-2023%3A1849-1
SUSE-SU-2023%3A1849-1
PUBLISHED
CVSS 7.5 HIGH
Security update for apache2-mod_auth_openidc
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SUSE Linux Enterprise Server 15 SP2-LTSS | ||
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | ||
| SUSE Linux Enterprise Server 15 SP1-LTSS | ||
| SUSE Linux Enterprise Server 15 SP3-LTSS | ||
| apache2 | ||
| SUSE Linux Enterprise Real Time 15 SP3 | ||
| SUSE Enterprise Storage 7 | ||
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | ||
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | ||
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | ||
| SUSE Manager Proxy 4.2 | ||
| SUSE Manager Server 4.2 | ||
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | ||
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | ||
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | ||
| SUSE Linux Enterprise Module for Server Applications 15 SP4 |
Timeline
- Apr 14, 2023 CVE Published
- Feb 4, 2026 CVE Updated
References
- https://www.suse.com/support/security/rating/ url
- https://lists.suse.com/pipermail/sle-updates/2023-April/028818.html advisory
- https://bugzilla.suse.com/1210073 advisory
- https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_1849-1.json advisory
- https://www.suse.com/support/update/announcement/2023/suse-su-20231849-1/ advisory
- https://www.suse.com/security/cve/CVE-2023-28625/ advisory