SUSE Manager Proxy LTS 4.3 vulnerabilities

2 known vulnerabilities in SUSE Manager Proxy LTS 4.3 from SUSE. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Container suse/sle-micro-rancher/5.3:latest: Authentication Bypass by Primary Weakness

  CVE-2026-41054May 20, 2026SUSE

  In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASC

• 8.7 High severity

  Container suse/manager/4.3/proxy-httpd:latest: Path Traversal: '.../...//'

  CVE-2025-53880Oct 30, 2025SUSE

  A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent network to write or delete files on the filesystem with the privileges of the unprivileged wwwrun user. Although the endpoint is unauthentica