Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-21952 Details

Description

A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://bugzilla.suse.com/show_bug.cgi?id=1199512 CVEExploitIssue TrackingThird Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1199512 [email protected]ExploitIssue TrackingThird Party Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-306Missing Authentication for Critical Function[email protected]
CWE-770Allocation of Resources Without Limits or Throttling[email protected]
CWE-306Missing Authentication for Critical Function[email protected]
CWE-770Allocation of Resources Without Limits or Throttling[email protected]

Affected Products

ProductVersions
suse manager server
>= 4.1, < 4.1.46
>= 4.2, < 4.2.37

CPE

  • cpe:2.3:a:suse:manager_server:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

12 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-21952
NVD Published Date:
Jun 22, 2022
NVD Last Modified:
Jul 7, 2026
Source:
[email protected]
CVE-2022-21952 Details - Not Deferred