CVE-2019-3684: SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a…

PriorityP429medium5.9CVSS 3.1

AVNACHPRNUINSUCHINAN

EPSS

0.71%

49.4th percentile

SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem

Affected

3 ranges

Vendor	Product	Version range	Fixed in
suse	manager	<= 4.0.7	—
suse	suse_manager	>= unspecified < 4.0.7	4.0.7
uyuni	uyuni	>= unspecified < 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade	1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade

CVSS provenance

nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

nvdv3.04.0MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.