Insecure Handling of SSH Keys Leads to Potential Key Access
CVE-2023-32189

5.9MEDIUM

Key Information:

Vendor
Suse
Status
Suse Manager Server Module 4.3
Vendor
CVE Published:
16 October 2024

Summary

The vulnerability arises from the insecure handling of SSH keys used for bootstrapping clients in SUSE products. This weakness permits local attackers to potentially access sensitive SSH keys, which could lead to unauthorized control of affected systems. It emphasizes the critical need for proper key management and access controls to safeguard SSH operations within these environments.

Affected Version(s)

SUSE Manager Server Module 4.3 ? < 4.3.27-150400.3.38.2

SUSE Manager Server Module 4.3 ? < 4.3.27-150400.3.38.2

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32189

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.