SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS vulnerabilities
1 known vulnerability in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS from SUSE. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest first
- 7.8 High severity
Container suse/sle-micro-rancher/5.3:latest: Authentication Bypass by Primary Weakness
In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASC