A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE Manager Server 4.0 cryptctl versions prior to 2.4.

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:2136-1 advisory.

  - A Use of Password Hash Instead of Password for Authentication vulnerability in cryptctl of SUSE Linux     Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed     password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Server for SAP     12-SP5 cryptctl versions prior to 2.4. SUSE Manager Server 4.0 cryptctl versions prior to 2.4.
    (CVE-2019-18906)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:2136-1 advisory.

  - A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE     Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack     it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE     Manager Server 4.0 cryptctl versions prior to 2.4. (CVE-2019-18906)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:2137-1 advisory.

  - A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE     Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack     it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE     Manager Server 4.0 cryptctl versions prior to 2.4. (CVE-2019-18906)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:0907-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
151715	openSUSE 15 Security Update : cryptctl (openSUSE-SU-2021:2136-1)	Nessus	SuSE Local Security Checks	critical
151098	SUSE SLED15 / SLES15 Security Update : cryptctl (SUSE-SU-2021:2136-1)	Nessus	SuSE Local Security Checks	critical
151087	SUSE SLES12 Security Update : cryptctl (SUSE-SU-2021:2137-1)	Nessus	SuSE Local Security Checks	critical
151023	openSUSE 15 Security Update : cryptctl (openSUSE-SU-2021:0907-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2019-18906

critical

Tenable Plugins

critical

critical

critical

critical