CVE-2023-32189

Insecure handling SSH key in SUSE Manager when bootstrapping new clients

Medium · published October 16, 2024

CVSS v4.0
6.4
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys

The record
Technical detail
CVSS v4.0
6.4 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H
EPSS
0.00146 · 3.5th percentile
Published
2024-10-16T13:48Z
EPSS history
Timeline
  • 16 OCT 13:48Z
    Insecure handling SSH key in SUSE Manager when bootstrapping new clients
    cvelistv5