A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-server versions prior to 2.10.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2781-1 advisory.

  - A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise     Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap     15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This     issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux     Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server     versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-     server versions prior to 2.10. (CVE-2022-31254)

  - A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart     MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart     parsing to take longer than expected. (CVE-2023-27530)

  - Possible XSS in SafeBuffer#bytesplice [fedora-all] (CVE-2023-28120)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0023-1 advisory.

  - A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise     Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap     15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This     issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux     Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server     versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-     server versions prior to 2.10. (CVE-2022-31254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0020-1 advisory.

  - A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise     Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap     15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This     issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux     Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server     versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-     server versions prior to 2.10. (CVE-2022-31254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0019-1 advisory.

  - A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise     Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap     15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This     issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux     Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server     versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-     server versions prior to 2.10. (CVE-2022-31254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0022-1 advisory.

  - A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise     Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap     15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This     issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux     Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server     versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-     server versions prior to 2.10. (CVE-2022-31254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0021-1 advisory.

  - A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise     Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap     15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This     issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux     Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server     versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-     server versions prior to 2.10. (CVE-2022-31254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
177990	SUSE SLES15 / openSUSE 15 Security Update : rmt-server (SUSE-SU-2023:2781-1)	Nessus	SuSE Local Security Checks	high
169486	SUSE SLES15 Security Update : rmt-server (SUSE-SU-2023:0023-1)	Nessus	SuSE Local Security Checks	high
169483	SUSE SLES15 Security Update : rmt-server (SUSE-SU-2023:0020-1)	Nessus	SuSE Local Security Checks	high
169482	SUSE SLES15 Security Update : rmt-server (SUSE-SU-2023:0019-1)	Nessus	SuSE Local Security Checks	high
169477	SUSE SLES15 Security Update : rmt-server (SUSE-SU-2023:0022-1)	Nessus	SuSE Local Security Checks	high
169476	SUSE SLES15 Security Update : rmt-server (SUSE-SU-2023:0021-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2022-31254

high

Tenable Plugins

high

high

high

high

high

high