Suse Image Sles15-Sp4-Manager-Server-4-3-Byos-Gce vulnerabilities

2 known vulnerabilities affecting suse/image_sles15-sp4-manager-server-4-3-byos-gce.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2025-46809MEDIUMCVSS 6.9≥ ?, < 4.3.33-150400.3.55.22025-07-31

CVE-2025-46809 [MEDIUM] CWE-256 CVE-2025-46809: A Plaintext Storage of a Password vulnerability in SUSE exposes the credentials for the HTTP proxy i A Plaintext Storage of a Password vulnerability in SUSE exposes the credentials for the HTTP proxy in the log files. This issue affects Container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1: from ? before 4.3.33-150400.3.55.2; Container suse/manager/5.0/x86_64/proxy-httpd:5.0.5.7.23.1: from ? before 5.0.14-150600.4.17.1; Container suse/manager/5.0/x8

CVE-2025-46811CRITICALCVSS 9.3≥ ?, < 4.3.87-150400.3.110.22025-07-30

CVE-2025-46811 [CRITICAL] CWE-862 CVE-2025-46811: A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability to connec A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability to connect to port 443 of SUSE Manager is able to run any command as root on any client. This issue affects Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 5.0.27-150600.3.33.1; Image SLES15-SP4-Manager-Server-4-3-BYOS: from ? before 4.3