by Kastro
Paper/Archive/CVE-2025-46811

CVE-2025-46811

SUSE Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1 — SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint

EPSS 14%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 96.5.965 × 2019.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability to connect to port 443 of SUSE Manager is able to run any command as root on any client. This issue affects Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 5.0.27-150600.3.33.1; Image SLES15-SP4-Manager-Server-4-3-BYOS: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE: from ? before 4.3.87-150400.3.110.2; SUSE Manager Server Module 4.3: from ? before 4.3.87-150400.3.110.2.

Affected

ProductAffectedFixed inSource
Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1? – < 5.0.27-150600.3.33.15.0.27-150600.3.33.1CNA
Image SLES15-SP4-Manager-Server-4-3-BYOS? – < 4.3.87-150400.3.110.24.3.87-150400.3.110.2CNA
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure? – < 4.3.87-150400.3.110.24.3.87-150400.3.110.2CNA
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2? – < 4.3.87-150400.3.110.24.3.87-150400.3.110.2CNA
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE? – < 4.3.87-150400.3.110.24.3.87-150400.3.110.2CNA
SUSE Manager Server Module 4.3? – < 4.3.87-150400.3.110.24.3.87-150400.3.110.2CNA

Scores by source

suse (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
suse (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refbugzilla.suse.com/show_bug.cgi?id=CVE-2025-46811