The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0353-1 advisory.

    dracut-saltboot:

    - Update to version 0.1.1673279145.e7616bd
      * Add failsafe stop file when salt-minion does not stop (bsc#1172110)
      * Copy existing wicked config instead of generating new (bsc#1205599)

    grafana:

    - Update to version 8.5.15 (jsc#PED-2617):
      * CVE-2022-39306: Fix for privilege escalation (bsc#1205225)
      * CVE-2022-39307: Omit error from http response when user does not exists (bsc#1205227)
    - Update to version 8.5.14:
      * CVE-2022-39201: Fix do not forward login cookie in outgoing requests (bsc#1204303)
      * CVE-2022-31130: Make proxy endpoints not leak sensitive HTTP headers (bsc#1204305)
      * CVE-2022-31123: Fix plugin signature bypass (bsc#1204302)
      * CVE-2022-39229: Fix blocknig other users from signing in (bsc#1204304)

    mgr-osad:

    - Version 4.3.7-1
      * Updated logrotate configuration (bsc#1206470)

    mgr-push:

    - Version 4.3.5-1
      * Update translation strings

    rhnlib:

    - Version 4.3.5-1
      * Don't get stuck at the end of SSL transfers (bsc#1204032)

    spacecmd:

    - Version 4.3.18-1
      * Add python-dateutil dependency, required to process date values in         spacecmd api calls
    - Version 4.3.17-1
      * Remove python3-simplejson dependency
      * Correctly understand 'ssm' keyword on scap scheduling
      * Add vendor_advisory information to errata_details call (bsc#1205207)
      * Added two missing options to schedule product migration: allow-vendor-change         and remove-products-without-successor (bsc#1204126)
      * Changed schedule product migration to use the correct API method
      * Change default port of 'Containerized Proxy configuration' 8022

    spacewalk-client-tools:

    - Version 4.3.14-1
      * Update translation strings

    uyuni-common-libs:

    - Version 4.3.7-1
      * unify user notification code on java side

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

openSUSE 15 Security Update : SUSE Manager Client Tools (SUSE-SU-2023:0353-1)

high Nessus Plugin ID 171431

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Jun 26, 2026, 4:08 PM CVSS metrics ("Cvssv4 score" set to 8.5) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") Plugin metadata Plugin Feed: 202606261608
Version 1.2 Jul 14, 2023, 10:50 AM Plugin metadata Plugin Feed: 202307141050
Version 1.1 Mar 7, 2023, 10:48 PM Logic Changes (Added support for additional SUSE Platforms) Plugin Feed: 202303072248
Version 1.0 Feb 14, 2023, 6:01 PM New Plugin Feed: 202302141801