csaf_suse - suse-su-2024:1509-1

Vulnerability from csaf_suse

Published

2024-05-06 09:47

Modified

2024-05-06 09:47

Summary

Security update for SUSE Manager Client Tools

Notes

Title of the patch

Security update for SUSE Manager Client Tools

Description of the patch

This update fixes the following issues: POS_Image-Graphical7 was updated to version 0.1.1710765237.46af599: - Version 0.1.1710765237.46af599 * Moved image services to dracut-saltboot package * Use salt bundle - Version 0.1.1645440615.7f1328c * Removed deprecated kiwi functions POS_Image-JeOS7 was updated to version 0.1.1710765237.46af599: - Version 0.1.1710765237.46af599 * Moved image services to dracut-saltboot package * Use salt bundle - Version 0.1.1645440615.7f1328c * Removed deprecated kiwi functions ansible received the following fixes: - Security issues fixed: * CVE-2023-5764: Address issues where internal templating can cause unsafe variables to lose their unsafe designation (bsc#1216854) + Breaking changes: assert - Nested templating may result in an inability for the conditional to be evaluated. See the porting guide for more information. * CVE-2024-0690: Address issue where ANSIBLE_NO_LOG was ignored (bsc#1219002) * CVE-2020-14365: Ensure that packages are GPG validated (bsc#1175993) * CVE-2020-10744: Fixed insecure temporary directory creation (bsc#1171823) * CVE-2018-10874: Fixed inventory variables loading from current working directory when running ad-hoc command that can lead to code execution (bsc#1099805) - Bugs fixed: * Don't Require python-coverage, it is needed only for testing (bsc#1177948) dracut-saltboot was updated to version 0.1.1710765237.46af599: - Version 0.1.1710765237.46af599 * Load only first available leaseinfo (bsc#1221092) - Version 0.1.1681904360.84ef141 grafana was updated to version 9.5.18: - Grafana now requires Go 1.20 - Security issues fixed: * CVE-2024-1313: Require same organisation when deleting snapshots (bsc#1222155) * CVE-2023-6152: Add email verification when updating user email (bsc#1219912) - Other non-security related changes: * Version 9.5.17: + [FEATURE] Alerting: Backport use Alertmanager API v2 * Version 9.5.16: + [BUGFIX] Annotations: Split cleanup into separate queries and deletes to avoid deadlocks on MySQL * Version 9.5.15: + [FEATURE] Alerting: Attempt to retry retryable errors * Version 9.5.14: + [BUGFIX] Alerting: Fix state manager to not keep datasource_uid and ref_id labels in state after Error + [BUGFIX] Transformations: Config overrides being lost when config from query transform is applied + [BUGFIX] LDAP: Fix enable users on successfull login * Version 9.5.13: + [BUGFIX] BrowseDashboards: Only remember the most recent expanded folder + [BUGFIX] Licensing: Pass func to update env variables when starting plugin * Version 9.5.12: + [FEATURE] Azure: Add support for Workload Identity authentication * Version 9.5.9: + [FEATURE] SSE: Fix DSNode to not panic when response has empty response + [FEATURE] Prometheus: Handle the response with different field key order + [BUGFIX] LDAP: Fix user disabling mgr-daemon was updated to version 4.3.9-0: - Version 4.3.9-0 * Update translation strings spacecmd was updated to version 4.3.27-0: - Version 4.3.27-0 * Update translation strings spacewalk-client-tools was updated to version 4.3.19-0: - Version 4.3.19-0 * Update translation strings spacewalk-koan was updated to version version 4.3.6-0: - Version 4.3.6-0 * Change Docker image location for test uyuni-common-libs was updated to version 4.3.10-0: - Version 4.3.10-0 * Add support for package signature type V4 RSA/SHA384 * Add support for package signature type V4 RSA/SHA512 (bsc#1221465) uyuni-proxy-systemd-services was updated to version 4.3.12-0: - Version 4.3.12-0 * Update to SUSE Manager 4.3.12

Patchnames

SUSE-2024-1509,SUSE-SLE-Manager-Tools-15-2024-1509,SUSE-SLE-Manager-Tools-For-Micro-5-2024-1509,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1509,SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2024-1509,openSUSE-SLE-15.5-2024-1509

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for SUSE Manager Client Tools",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update fixes the following issues:\n\nPOS_Image-Graphical7 was updated to version 0.1.1710765237.46af599:\n\n- Version 0.1.1710765237.46af599\n\n  * Moved image services to dracut-saltboot package\n  * Use salt bundle\n\n- Version 0.1.1645440615.7f1328c\n\n  * Removed deprecated kiwi functions\n\nPOS_Image-JeOS7 was updated to version 0.1.1710765237.46af599:\n\n- Version 0.1.1710765237.46af599\n\n  * Moved image services to dracut-saltboot package\n  * Use salt bundle\n\n- Version 0.1.1645440615.7f1328c\n\n  * Removed deprecated kiwi functions\n\nansible received the following fixes:\n\n- Security issues fixed:\n\n  * CVE-2023-5764: Address issues where internal templating can cause unsafe\n    variables to lose their unsafe designation (bsc#1216854)\n\n    + Breaking changes:\n      assert - Nested templating may result in an inability for the conditional\n      to be evaluated. See the porting guide for more information.\n\n  * CVE-2024-0690: Address issue where ANSIBLE_NO_LOG was ignored (bsc#1219002)\n  * CVE-2020-14365: Ensure that packages are GPG validated (bsc#1175993)\n  * CVE-2020-10744: Fixed insecure temporary directory creation (bsc#1171823)\n  * CVE-2018-10874: Fixed inventory variables loading from current working directory when running ad-hoc command that\n    can lead to code execution (bsc#1099805)\n\n- Bugs fixed:  \n\n  * Don't Require python-coverage, it is needed only for testing (bsc#1177948)\n\ndracut-saltboot was updated to version 0.1.1710765237.46af599:\n\n- Version 0.1.1710765237.46af599\n\n  * Load only first available leaseinfo (bsc#1221092)\n\n- Version 0.1.1681904360.84ef141\n\ngrafana was updated to version 9.5.18:\n\n- Grafana now requires Go 1.20\n- Security issues fixed:\n\n  * CVE-2024-1313: Require same organisation when deleting snapshots (bsc#1222155)\n  * CVE-2023-6152: Add email verification when updating user email (bsc#1219912)\n\n- Other non-security related changes:\n\n  * Version 9.5.17:\n\n    + [FEATURE] Alerting: Backport use Alertmanager API v2\n\n  * Version 9.5.16:\n\n    + [BUGFIX] Annotations: Split cleanup into separate queries and\n      deletes to avoid deadlocks on MySQL\n\n  * Version 9.5.15:\n\n    + [FEATURE] Alerting: Attempt to retry retryable errors\n\n  * Version 9.5.14:\n\n    + [BUGFIX] Alerting: Fix state manager to not keep\n      datasource_uid and ref_id labels in state after Error\n    + [BUGFIX] Transformations: Config overrides being lost when\n      config from query transform is applied\n    + [BUGFIX] LDAP: Fix enable users on successfull login\n\n  * Version 9.5.13:\n\n    + [BUGFIX] BrowseDashboards: Only remember the most recent\n      expanded folder\n    + [BUGFIX] Licensing: Pass func to update env variables when\n      starting plugin\n\n  * Version 9.5.12:\n\n    + [FEATURE] Azure: Add support for Workload Identity\n      authentication\n\n  * Version 9.5.9:\n\n    + [FEATURE] SSE: Fix DSNode to not panic when response has empty\n      response\n    + [FEATURE] Prometheus: Handle the response with different field\n      key order\n    + [BUGFIX] LDAP: Fix user disabling\n\nmgr-daemon was updated to version 4.3.9-0:\n\n- Version 4.3.9-0\n\n  * Update translation strings\n\nspacecmd was updated to version 4.3.27-0:\n\n- Version 4.3.27-0\n\n  * Update translation strings\n\nspacewalk-client-tools was updated to version 4.3.19-0:\n\n- Version 4.3.19-0\n\n  * Update translation strings\n\nspacewalk-koan was updated to version version 4.3.6-0:\n\n- Version 4.3.6-0\n\n  * Change Docker image location for test\n\nuyuni-common-libs was updated to version 4.3.10-0:\n\n- Version 4.3.10-0\n\n  * Add support for package signature type V4 RSA/SHA384\n  * Add support for package signature type V4 RSA/SHA512 (bsc#1221465)\n\nuyuni-proxy-systemd-services was updated to version 4.3.12-0:\n\n- Version 4.3.12-0\n\n  * Update to SUSE Manager 4.3.12\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2024-1509,SUSE-SLE-Manager-Tools-15-2024-1509,SUSE-SLE-Manager-Tools-For-Micro-5-2024-1509,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1509,SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2024-1509,openSUSE-SLE-15.5-2024-1509",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_1509-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2024:1509-1",
            url: "https://www.suse.com/support/update/announcement/2024/suse-su-20241509-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2024:1509-1",
            url: "https://lists.suse.com/pipermail/sle-updates/2024-May/035168.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1008037",
            url: "https://bugzilla.suse.com/1008037",
         },
         {
            category: "self",
            summary: "SUSE Bug 1008038",
            url: "https://bugzilla.suse.com/1008038",
         },
         {
            category: "self",
            summary: "SUSE Bug 1010940",
            url: "https://bugzilla.suse.com/1010940",
         },
         {
            category: "self",
            summary: "SUSE Bug 1019021",
            url: "https://bugzilla.suse.com/1019021",
         },
         {
            category: "self",
            summary: "SUSE Bug 1038785",
            url: "https://bugzilla.suse.com/1038785",
         },
         {
            category: "self",
            summary: "SUSE Bug 1059235",
            url: "https://bugzilla.suse.com/1059235",
         },
         {
            category: "self",
            summary: "SUSE Bug 1099805",
            url: "https://bugzilla.suse.com/1099805",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166389",
            url: "https://bugzilla.suse.com/1166389",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171823",
            url: "https://bugzilla.suse.com/1171823",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174145",
            url: "https://bugzilla.suse.com/1174145",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174302",
            url: "https://bugzilla.suse.com/1174302",
         },
         {
            category: "self",
            summary: "SUSE Bug 1175993",
            url: "https://bugzilla.suse.com/1175993",
         },
         {
            category: "self",
            summary: "SUSE Bug 1177948",
            url: "https://bugzilla.suse.com/1177948",
         },
         {
            category: "self",
            summary: "SUSE Bug 1216854",
            url: "https://bugzilla.suse.com/1216854",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219002",
            url: "https://bugzilla.suse.com/1219002",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219912",
            url: "https://bugzilla.suse.com/1219912",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221092",
            url: "https://bugzilla.suse.com/1221092",
         },
         {
            category: "self",
            summary: "SUSE Bug 1221465",
            url: "https://bugzilla.suse.com/1221465",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222155",
            url: "https://bugzilla.suse.com/1222155",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-8614 page",
            url: "https://www.suse.com/security/cve/CVE-2016-8614/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-8628 page",
            url: "https://www.suse.com/security/cve/CVE-2016-8628/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-8647 page",
            url: "https://www.suse.com/security/cve/CVE-2016-8647/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-9587 page",
            url: "https://www.suse.com/security/cve/CVE-2016-9587/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7550 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7550/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-10874 page",
            url: "https://www.suse.com/security/cve/CVE-2018-10874/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10744 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10744/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-14330 page",
            url: "https://www.suse.com/security/cve/CVE-2020-14330/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-14332 page",
            url: "https://www.suse.com/security/cve/CVE-2020-14332/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-14365 page",
            url: "https://www.suse.com/security/cve/CVE-2020-14365/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-1753 page",
            url: "https://www.suse.com/security/cve/CVE-2020-1753/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-5764 page",
            url: "https://www.suse.com/security/cve/CVE-2023-5764/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-6152 page",
            url: "https://www.suse.com/security/cve/CVE-2023-6152/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-0690 page",
            url: "https://www.suse.com/security/cve/CVE-2024-0690/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-1313 page",
            url: "https://www.suse.com/security/cve/CVE-2024-1313/",
         },
      ],
      title: "Security update for SUSE Manager Client Tools",
      tracking: {
         current_release_date: "2024-05-06T09:47:44Z",
         generator: {
            date: "2024-05-06T09:47:44Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2024:1509-1",
         initial_release_date: "2024-05-06T09:47:44Z",
         revision_history: [
            {
               date: "2024-05-06T09:47:44Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                        product: {
                           name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                           product_id: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "grafana-9.5.18-150000.1.63.2.aarch64",
                        product: {
                           name: "grafana-9.5.18-150000.1.63.2.aarch64",
                           product_id: "grafana-9.5.18-150000.1.63.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                        product: {
                           name: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                           product_id: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                        product: {
                           name: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                           product_id: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.i586",
                        product: {
                           name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.i586",
                           product_id: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "grafana-9.5.18-150000.1.63.2.i586",
                        product: {
                           name: "grafana-9.5.18-150000.1.63.2.i586",
                           product_id: "grafana-9.5.18-150000.1.63.2.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.i586",
                        product: {
                           name: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.i586",
                           product_id: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.i586",
                        product: {
                           name: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.i586",
                           product_id: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                        product: {
                           name: "POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                           product_id: "POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                        product: {
                           name: "POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                           product_id: "POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ansible-2.9.27-150000.1.17.2.noarch",
                        product: {
                           name: "ansible-2.9.27-150000.1.17.2.noarch",
                           product_id: "ansible-2.9.27-150000.1.17.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ansible-doc-2.9.27-150000.1.17.2.noarch",
                        product: {
                           name: "ansible-doc-2.9.27-150000.1.17.2.noarch",
                           product_id: "ansible-doc-2.9.27-150000.1.17.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ansible-test-2.9.27-150000.1.17.2.noarch",
                        product: {
                           name: "ansible-test-2.9.27-150000.1.17.2.noarch",
                           product_id: "ansible-test-2.9.27-150000.1.17.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                        product: {
                           name: "dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                           product_id: "dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "mgr-daemon-4.3.9-150000.1.47.2.noarch",
                        product: {
                           name: "mgr-daemon-4.3.9-150000.1.47.2.noarch",
                           product_id: "mgr-daemon-4.3.9-150000.1.47.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                        product: {
                           name: "python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                           product_id: "python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                        product: {
                           name: "python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                           product_id: "python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                        product: {
                           name: "python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                           product_id: "python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                        product: {
                           name: "python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                           product_id: "python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "spacecmd-4.3.27-150000.3.116.2.noarch",
                        product: {
                           name: "spacecmd-4.3.27-150000.3.116.2.noarch",
                           product_id: "spacecmd-4.3.27-150000.3.116.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "spacewalk-check-4.3.19-150000.3.89.2.noarch",
                        product: {
                           name: "spacewalk-check-4.3.19-150000.3.89.2.noarch",
                           product_id: "spacewalk-check-4.3.19-150000.3.89.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                        product: {
                           name: "spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                           product_id: "spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                        product: {
                           name: "spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                           product_id: "spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                        product: {
                           name: "spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                           product_id: "spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                        product: {
                           name: "uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                           product_id: "uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                        product: {
                           name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                           product_id: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "grafana-9.5.18-150000.1.63.2.ppc64le",
                        product: {
                           name: "grafana-9.5.18-150000.1.63.2.ppc64le",
                           product_id: "grafana-9.5.18-150000.1.63.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                        product: {
                           name: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                           product_id: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                        product: {
                           name: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                           product_id: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                        product: {
                           name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                           product_id: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "grafana-9.5.18-150000.1.63.2.s390x",
                        product: {
                           name: "grafana-9.5.18-150000.1.63.2.s390x",
                           product_id: "grafana-9.5.18-150000.1.63.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                        product: {
                           name: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                           product_id: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                        product: {
                           name: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                           product_id: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                        product: {
                           name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                           product_id: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "grafana-9.5.18-150000.1.63.2.x86_64",
                        product: {
                           name: "grafana-9.5.18-150000.1.63.2.x86_64",
                           product_id: "grafana-9.5.18-150000.1.63.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                        product: {
                           name: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                           product_id: "python2-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                        product: {
                           name: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                           product_id: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Manager Client Tools 15",
                        product: {
                           name: "SUSE Manager Client Tools 15",
                           product_id: "SUSE Manager Client Tools 15",
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Manager Client Tools for SLE Micro 5",
                        product: {
                           name: "SUSE Manager Client Tools for SLE Micro 5",
                           product_id: "SUSE Manager Client Tools for SLE Micro 5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-manager-tools-micro:5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                           product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:packagehub:15:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Manager Proxy Module 4.3",
                        product: {
                           name: "SUSE Manager Proxy Module 4.3",
                           product_id: "SUSE Manager Proxy Module 4.3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-module-suse-manager-proxy:4.3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "openSUSE Leap 15.5",
                        product: {
                           name: "openSUSE Leap 15.5",
                           product_id: "openSUSE Leap 15.5",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap:15.5",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
            },
            product_reference: "POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
            },
            product_reference: "POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ansible-2.9.27-150000.1.17.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
            },
            product_reference: "ansible-2.9.27-150000.1.17.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ansible-doc-2.9.27-150000.1.17.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
            },
            product_reference: "ansible-doc-2.9.27-150000.1.17.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
            },
            product_reference: "dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "grafana-9.5.18-150000.1.63.2.aarch64 as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
            },
            product_reference: "grafana-9.5.18-150000.1.63.2.aarch64",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "grafana-9.5.18-150000.1.63.2.ppc64le as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
            },
            product_reference: "grafana-9.5.18-150000.1.63.2.ppc64le",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "grafana-9.5.18-150000.1.63.2.s390x as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
            },
            product_reference: "grafana-9.5.18-150000.1.63.2.s390x",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "grafana-9.5.18-150000.1.63.2.x86_64 as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
            },
            product_reference: "grafana-9.5.18-150000.1.63.2.x86_64",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mgr-daemon-4.3.9-150000.1.47.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
            },
            product_reference: "mgr-daemon-4.3.9-150000.1.47.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-spacewalk-check-4.3.19-150000.3.89.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
            },
            product_reference: "python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
            },
            product_reference: "python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
            },
            product_reference: "python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
            },
            product_reference: "python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64 as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
            },
            product_reference: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
            },
            product_reference: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
            },
            product_reference: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64 as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
            },
            product_reference: "python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "spacecmd-4.3.27-150000.3.116.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
            },
            product_reference: "spacecmd-4.3.27-150000.3.116.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "spacewalk-check-4.3.19-150000.3.89.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
            },
            product_reference: "spacewalk-check-4.3.19-150000.3.89.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "spacewalk-client-setup-4.3.19-150000.3.89.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
            },
            product_reference: "spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "spacewalk-client-tools-4.3.19-150000.3.89.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
            },
            product_reference: "spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "spacewalk-koan-4.3.6-150000.3.33.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
            },
            product_reference: "spacewalk-koan-4.3.6-150000.3.33.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
            },
            product_reference: "uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch as component of SUSE Manager Client Tools for SLE Micro 5",
               product_id: "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
            },
            product_reference: "dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools for SLE Micro 5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch as component of SUSE Manager Client Tools for SLE Micro 5",
               product_id: "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
            },
            product_reference: "uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools for SLE Micro 5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
            },
            product_reference: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
            },
            product_reference: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
            },
            product_reference: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
            },
            product_reference: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ansible-2.9.27-150000.1.17.2.noarch as component of SUSE Manager Proxy Module 4.3",
               product_id: "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
            },
            product_reference: "ansible-2.9.27-150000.1.17.2.noarch",
            relates_to_product_reference: "SUSE Manager Proxy Module 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ansible-doc-2.9.27-150000.1.17.2.noarch as component of SUSE Manager Proxy Module 4.3",
               product_id: "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
            },
            product_reference: "ansible-doc-2.9.27-150000.1.17.2.noarch",
            relates_to_product_reference: "SUSE Manager Proxy Module 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch as component of SUSE Manager Proxy Module 4.3",
               product_id: "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
            },
            product_reference: "uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
            relates_to_product_reference: "SUSE Manager Proxy Module 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
            },
            product_reference: "POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
            },
            product_reference: "POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ansible-2.9.27-150000.1.17.2.noarch as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
            },
            product_reference: "ansible-2.9.27-150000.1.17.2.noarch",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ansible-doc-2.9.27-150000.1.17.2.noarch as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
            },
            product_reference: "ansible-doc-2.9.27-150000.1.17.2.noarch",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ansible-test-2.9.27-150000.1.17.2.noarch as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
            },
            product_reference: "ansible-test-2.9.27-150000.1.17.2.noarch",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
            },
            product_reference: "dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64 as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
            },
            product_reference: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
            },
            product_reference: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
            },
            product_reference: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64 as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
            },
            product_reference: "golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "spacecmd-4.3.27-150000.3.116.2.noarch as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            },
            product_reference: "spacecmd-4.3.27-150000.3.116.2.noarch",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2016-8614",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-8614",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-8614",
               url: "https://www.suse.com/security/cve/CVE-2016-8614",
            },
            {
               category: "external",
               summary: "SUSE Bug 1008038 for CVE-2016-8614",
               url: "https://bugzilla.suse.com/1008038",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-8614",
      },
      {
         cve: "CVE-2016-8628",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-8628",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-8628",
               url: "https://www.suse.com/security/cve/CVE-2016-8628",
            },
            {
               category: "external",
               summary: "SUSE Bug 1008037 for CVE-2016-8628",
               url: "https://bugzilla.suse.com/1008037",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.1,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-8628",
      },
      {
         cve: "CVE-2016-8647",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-8647",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-8647",
               url: "https://www.suse.com/security/cve/CVE-2016-8647",
            },
            {
               category: "external",
               summary: "SUSE Bug 1008038 for CVE-2016-8647",
               url: "https://bugzilla.suse.com/1008038",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010940 for CVE-2016-8647",
               url: "https://bugzilla.suse.com/1010940",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "low",
            },
         ],
         title: "CVE-2016-8647",
      },
      {
         cve: "CVE-2016-9587",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-9587",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-9587",
               url: "https://www.suse.com/security/cve/CVE-2016-9587",
            },
            {
               category: "external",
               summary: "SUSE Bug 1019021 for CVE-2016-9587",
               url: "https://bugzilla.suse.com/1019021",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "important",
            },
         ],
         title: "CVE-2016-9587",
      },
      {
         cve: "CVE-2017-7550",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7550",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the \"params\" argument, and noting this in the module documentation.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7550",
               url: "https://www.suse.com/security/cve/CVE-2017-7550",
            },
            {
               category: "external",
               summary: "SUSE Bug 1035124 for CVE-2017-7550",
               url: "https://bugzilla.suse.com/1035124",
            },
            {
               category: "external",
               summary: "SUSE Bug 1065872 for CVE-2017-7550",
               url: "https://bugzilla.suse.com/1065872",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "important",
            },
         ],
         title: "CVE-2017-7550",
      },
      {
         cve: "CVE-2018-10874",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-10874",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-10874",
               url: "https://www.suse.com/security/cve/CVE-2018-10874",
            },
            {
               category: "external",
               summary: "SUSE Bug 1097775 for CVE-2018-10874",
               url: "https://bugzilla.suse.com/1097775",
            },
            {
               category: "external",
               summary: "SUSE Bug 1099805 for CVE-2018-10874",
               url: "https://bugzilla.suse.com/1099805",
            },
            {
               category: "external",
               summary: "SUSE Bug 1099808 for CVE-2018-10874",
               url: "https://bugzilla.suse.com/1099808",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "important",
            },
         ],
         title: "CVE-2018-10874",
      },
      {
         cve: "CVE-2020-10744",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10744",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the race condition on systems using ACLs and FUSE filesystems. Ansible Engine 2.7.18, 2.8.12, and 2.9.9 as well as previous versions are affected and Ansible Tower 3.4.5, 3.5.6 and 3.6.4 as well as previous versions are affected.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10744",
               url: "https://www.suse.com/security/cve/CVE-2020-10744",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171823 for CVE-2020-10744",
               url: "https://bugzilla.suse.com/1171823",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10744",
      },
      {
         cve: "CVE-2020-14330",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-14330",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this vulnerability is to data confidentiality.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-14330",
               url: "https://www.suse.com/security/cve/CVE-2020-14330",
            },
            {
               category: "external",
               summary: "SUSE Bug 1174145 for CVE-2020-14330",
               url: "https://bugzilla.suse.com/1174145",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-14330",
      },
      {
         cve: "CVE-2020-14332",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-14332",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Ansible Engine when using module_args. Tasks executed with check mode (--check-mode) do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-14332",
               url: "https://www.suse.com/security/cve/CVE-2020-14332",
            },
            {
               category: "external",
               summary: "SUSE Bug 1174302 for CVE-2020-14332",
               url: "https://bugzilla.suse.com/1174302",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-14332",
      },
      {
         cve: "CVE-2020-14365",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-14365",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation even when disable_gpg_check is set to False, which is the default behavior. This flaw leads to malicious packages being installed on the system and arbitrary code executed via package installation scripts. The highest threat from this vulnerability is to integrity and system availability.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-14365",
               url: "https://www.suse.com/security/cve/CVE-2020-14365",
            },
            {
               category: "external",
               summary: "SUSE Bug 1175993 for CVE-2020-14365",
               url: "https://bugzilla.suse.com/1175993",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-14365",
      },
      {
         cve: "CVE-2020-1753",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-1753",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed to kubectl from the command line, not using an environment variable or an input configuration file. This will disclose passwords and tokens from process list and no_log directive from debug module would not have any effect making these secrets being disclosed on stdout and log files.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-1753",
               url: "https://www.suse.com/security/cve/CVE-2020-1753",
            },
            {
               category: "external",
               summary: "SUSE Bug 1166389 for CVE-2020-1753",
               url: "https://bugzilla.suse.com/1166389",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-1753",
      },
      {
         cve: "CVE-2023-5764",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-5764",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-5764",
               url: "https://www.suse.com/security/cve/CVE-2023-5764",
            },
            {
               category: "external",
               summary: "SUSE Bug 1216854 for CVE-2023-5764",
               url: "https://bugzilla.suse.com/1216854",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-5764",
      },
      {
         cve: "CVE-2023-6152",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-6152",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A user changing their email after signing up and verifying it can change it without verification in profile settings.\n\nThe configuration option \"verify_email_enabled\" will only validate email only on sign up.\n\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-6152",
               url: "https://www.suse.com/security/cve/CVE-2023-6152",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219912 for CVE-2023-6152",
               url: "https://bugzilla.suse.com/1219912",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-6152",
      },
      {
         cve: "CVE-2024-0690",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-0690",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-0690",
               url: "https://www.suse.com/security/cve/CVE-2024-0690",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219002 for CVE-2024-0690",
               url: "https://bugzilla.suse.com/1219002",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-0690",
      },
      {
         cve: "CVE-2024-1313",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-1313",
            },
         ],
         notes: [
            {
               category: "general",
               text: "It is possible for a user in a different organization from the owner of a snapshot to bypass authorization and delete a snapshot by issuing a DELETE request to /api/snapshots/<key> using its view key. This functionality is intended to only be available to individuals with the permission to write/edit to the snapshot in question, but due to a bug in the authorization logic, deletion requests issued by an unprivileged user in a different organization than the snapshot owner are treated as authorized.\n\nGrafana Labs would like to thank Ravid Mazon and Jay Chen of Palo \nAlto Research for discovering and disclosing this vulnerability.\n\nThis issue affects Grafana: from 9.5.0 before 9.5.18, from 10.0.0 before 10.0.13, from 10.1.0 before 10.1.9, from 10.2.0 before 10.2.6, from 10.3.0 before 10.3.5.\n\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
               "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
               "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
               "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
               "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
               "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-1313",
               url: "https://www.suse.com/security/cve/CVE-2024-1313",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222155 for CVE-2024-1313",
               url: "https://bugzilla.suse.com/1222155",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "SUSE Manager Client Tools 15:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.18-150000.1.63.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.9-150000.1.47.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.aarch64",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.ppc64le",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.s390x",
                  "SUSE Manager Client Tools 15:python3-uyuni-common-libs-4.3.10-150000.1.39.2.x86_64",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.27-150000.3.116.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.19-150000.3.89.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-koan-4.3.6-150000.3.33.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "SUSE Manager Proxy Module 4.3:uyuni-proxy-systemd-services-4.3.12-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-Graphical7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:POS_Image-JeOS7-0.1.1710765237.46af599-150000.1.21.2.noarch",
                  "openSUSE Leap 15.5:ansible-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-doc-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:ansible-test-2.9.27-150000.1.17.2.noarch",
                  "openSUSE Leap 15.5:dracut-saltboot-0.1.1710765237.46af599-150000.1.53.2.noarch",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.aarch64",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.ppc64le",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.s390x",
                  "openSUSE Leap 15.5:golang-github-prometheus-promu-0.14.0-150000.3.18.2.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.27-150000.3.116.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-05-06T09:47:44Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-1313",
      },
   ],
}

CVE-2016-8614 (GCVE-0-2016-8614)

Vulnerability from cvelistv5

Published

2018-07-31 21:00

Modified

2024-08-06 02:27

Severity ?

6.3 (Medium) - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Summary

A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/94108	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8614	x_refsource_CONFIRM
	https://github.com/ansible/ansible-modules-core/pull/5353	x_refsource_CONFIRM
	https://github.com/ansible/ansible-modules-core/pull/5357	x_refsource_CONFIRM
	https://github.com/ansible/ansible-modules-core/issues/5237	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Red Hat	Ansible	Version: 2.2.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T02:27:41.024Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "94108",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/94108",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8614",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/ansible/ansible-modules-core/pull/5353",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/ansible/ansible-modules-core/pull/5357",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/ansible/ansible-modules-core/issues/5237",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Ansible",
               vendor: "Red Hat",
               versions: [
                  {
                     status: "affected",
                     version: "2.2.0",
                  },
               ],
            },
         ],
         datePublic: "2016-11-01T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-358",
                     description: "CWE-358",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-08-01T16:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "94108",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/94108",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8614",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/ansible/ansible-modules-core/pull/5353",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/ansible/ansible-modules-core/pull/5357",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/ansible/ansible-modules-core/issues/5237",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2016-8614",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Ansible",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "2.2.0",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Red Hat",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.",
                  },
               ],
            },
            impact: {
               cvss: [
                  [
                     {
                        vectorString: "6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
                        version: "3.0",
                     },
                  ],
                  [
                     {
                        vectorString: "6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P",
                        version: "2.0",
                     },
                  ],
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-358",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "94108",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/94108",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8614",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8614",
                  },
                  {
                     name: "https://github.com/ansible/ansible-modules-core/pull/5353",
                     refsource: "CONFIRM",
                     url: "https://github.com/ansible/ansible-modules-core/pull/5353",
                  },
                  {
                     name: "https://github.com/ansible/ansible-modules-core/pull/5357",
                     refsource: "CONFIRM",
                     url: "https://github.com/ansible/ansible-modules-core/pull/5357",
                  },
                  {
                     name: "https://github.com/ansible/ansible-modules-core/issues/5237",
                     refsource: "CONFIRM",
                     url: "https://github.com/ansible/ansible-modules-core/issues/5237",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2016-8614",
      datePublished: "2018-07-31T21:00:00",
      dateReserved: "2016-10-12T00:00:00",
      dateUpdated: "2024-08-06T02:27:41.024Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2020-14332 (GCVE-0-2020-14332)

Vulnerability from cvelistv5

Published

2020-09-11 17:59

Modified

2024-08-04 12:39

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Summary

A flaw was found in the Ansible Engine when using module_args. Tasks executed with check mode (--check-mode) do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality.

References

▼	URL	Tags
	https://github.com/ansible/ansible/pull/71033	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14332	x_refsource_CONFIRM
	https://www.debian.org/security/2021/dsa-4950	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	Red Hat	Ansible	Version: 2.9.12 Version: 2.8.14

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:39:36.318Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/ansible/ansible/pull/71033",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14332",
               },
               {
                  name: "DSA-4950",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-4950",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Ansible",
               vendor: "Red Hat",
               versions: [
                  {
                     status: "affected",
                     version: "2.9.12",
                  },
                  {
                     status: "affected",
                     version: "2.8.14",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A flaw was found in the Ansible Engine when using module_args. Tasks executed with check mode (--check-mode) do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "NONE",
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-117",
                     description: "CWE-117",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-08-07T14:06:09",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/ansible/ansible/pull/71033",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14332",
            },
            {
               name: "DSA-4950",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2021/dsa-4950",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-14332",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Ansible",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "2.9.12",
                                       },
                                       {
                                          version_value: "2.8.14",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Red Hat",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A flaw was found in the Ansible Engine when using module_args. Tasks executed with check mode (--check-mode) do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The highest threat from this vulnerability is to confidentiality.",
                  },
               ],
            },
            impact: {
               cvss: [
                  [
                     {
                        vectorString: "5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                        version: "3.0",
                     },
                  ],
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-117",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/ansible/ansible/pull/71033",
                     refsource: "MISC",
                     url: "https://github.com/ansible/ansible/pull/71033",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14332",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14332",
                  },
                  {
                     name: "DSA-4950",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2021/dsa-4950",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-14332",
      datePublished: "2020-09-11T17:59:30",
      dateReserved: "2020-06-17T00:00:00",
      dateUpdated: "2024-08-04T12:39:36.318Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2020-14330 (GCVE-0-2020-14330)

Vulnerability from cvelistv5

Published

2020-09-11 00:00

Modified

2024-08-04 12:39

Severity ?

5.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Summary

An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this vulnerability is to data confidentiality.

References

▼	URL	Tags
	https://github.com/ansible/ansible/issues/68400
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14330
	https://www.debian.org/security/2021/dsa-4950	vendor-advisory

Impacted products

	Vendor	Product	Version
	Red Hat	Ansible	Version: 2.10.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:39:36.412Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/ansible/ansible/issues/68400",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14330",
               },
               {
                  name: "DSA-4950",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-4950",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Ansible",
               vendor: "Red Hat",
               versions: [
                  {
                     status: "affected",
                     version: "2.10.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. This flaw allows an attacker to access the logs or outputs of performed tasks to read keys used in playbooks from other users within the uri module. The highest threat from this vulnerability is to data confidentiality.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "NONE",
                  baseScore: 5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-532",
                     description: "CWE-532",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-07T00:00:00",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               url: "https://github.com/ansible/ansible/issues/68400",
            },
            {
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14330",
            },
            {
               name: "DSA-4950",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.debian.org/security/2021/dsa-4950",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-14330",
      datePublished: "2020-09-11T00:00:00",
      dateReserved: "2020-06-17T00:00:00",
      dateUpdated: "2024-08-04T12:39:36.412Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2020-14365 (GCVE-0-2020-14365)

Vulnerability from cvelistv5

Published

2020-09-23 12:25

Modified

2024-08-04 12:46

Severity ?

Summary

A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation even when disable_gpg_check is set to False, which is the default behavior. This flaw leads to malicious packages being installed on the system and arbitrary code executed via package installation scripts. The highest threat from this vulnerability is to integrity and system availability.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1869154	x_refsource_MISC
	https://www.debian.org/security/2021/dsa-4950	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	ansible	Version: ansible-engine 2.8.15, ansible-engine 2.9.13

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:46:33.762Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1869154",
               },
               {
                  name: "DSA-4950",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-4950",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "ansible",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "ansible-engine 2.8.15, ansible-engine 2.9.13",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation even when disable_gpg_check is set to False, which is the default behavior. This flaw leads to malicious packages being installed on the system and arbitrary code executed via package installation scripts. The highest threat from this vulnerability is to integrity and system availability.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-347",
                     description: "CWE-347",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-08-07T14:06:19",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1869154",
            },
            {
               name: "DSA-4950",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2021/dsa-4950",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-14365",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "ansible",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "ansible-engine 2.8.15, ansible-engine 2.9.13",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during installation even when disable_gpg_check is set to False, which is the default behavior. This flaw leads to malicious packages being installed on the system and arbitrary code executed via package installation scripts. The highest threat from this vulnerability is to integrity and system availability.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-347",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1869154",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1869154",
                  },
                  {
                     name: "DSA-4950",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2021/dsa-4950",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-14365",
      datePublished: "2020-09-23T12:25:47",
      dateReserved: "2020-06-17T00:00:00",
      dateUpdated: "2024-08-04T12:46:33.762Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2020-10744 (GCVE-0-2020-10744)

Vulnerability from cvelistv5

Published

2020-05-15 13:44

Modified

2024-08-04 11:14

Severity ?

5.0 (Medium) - CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

Summary

An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the race condition on systems using ACLs and FUSE filesystems. Ansible Engine 2.7.18, 2.8.12, and 2.9.9 as well as previous versions are affected and Ansible Tower 3.4.5, 3.5.6 and 3.6.4 as well as previous versions are affected.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10744	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Red Hat	ansible	Version: ansible-engine 2.7.18 and prior Version: ansible-engine 2.8.12 and prior Version: ansible-engine 2.9.9 and prior Version: ansible-tower 3.4.5 and prior Version: ansible-tower 3.5.6 and prior Version: ansible-tower 3.6.4 and prior

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T11:14:15.623Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10744",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "ansible",
               vendor: "Red Hat",
               versions: [
                  {
                     status: "affected",
                     version: "ansible-engine 2.7.18 and prior",
                  },
                  {
                     status: "affected",
                     version: "ansible-engine 2.8.12 and prior",
                  },
                  {
                     status: "affected",
                     version: "ansible-engine 2.9.9 and prior",
                  },
                  {
                     status: "affected",
                     version: "ansible-tower 3.4.5 and prior",
                  },
                  {
                     status: "affected",
                     version: "ansible-tower 3.5.6 and prior",
                  },
                  {
                     status: "affected",
                     version: "ansible-tower 3.6.4 and prior",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the race condition on systems using ACLs and FUSE filesystems. Ansible Engine 2.7.18, 2.8.12, and 2.9.9 as well as previous versions are affected and Ansible Tower 3.4.5, 3.5.6 and 3.6.4 as well as previous versions are affected.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "HIGH",
                  attackVector: "LOCAL",
                  availabilityImpact: "LOW",
                  baseScore: 5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "LOW",
                  scope: "CHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-377",
                     description: "CWE-377",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-05-15T13:44:33",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10744",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-10744",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "ansible",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "ansible-engine 2.7.18 and prior",
                                       },
                                       {
                                          version_value: "ansible-engine 2.8.12 and prior",
                                       },
                                       {
                                          version_value: "ansible-engine 2.9.9 and prior",
                                       },
                                       {
                                          version_value: "ansible-tower 3.4.5 and prior",
                                       },
                                       {
                                          version_value: "ansible-tower 3.5.6 and prior",
                                       },
                                       {
                                          version_value: "ansible-tower 3.6.4 and prior",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Red Hat",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the race condition on systems using ACLs and FUSE filesystems. Ansible Engine 2.7.18, 2.8.12, and 2.9.9 as well as previous versions are affected and Ansible Tower 3.4.5, 3.5.6 and 3.6.4 as well as previous versions are affected.",
                  },
               ],
            },
            impact: {
               cvss: [
                  [
                     {
                        vectorString: "5/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L",
                        version: "3.0",
                     },
                  ],
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-377",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10744",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10744",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-10744",
      datePublished: "2020-05-15T13:44:33",
      dateReserved: "2020-03-20T00:00:00",
      dateUpdated: "2024-08-04T11:14:15.623Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2018-10874 (GCVE-0-2018-10874)

Vulnerability from cvelistv5

Published

2018-07-02 13:00

Modified

2024-08-05 07:46

Severity ?

7.8 (High) - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:2166	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2152	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2150	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1041396	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHBA-2018:3788	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:0054	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2151	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2321	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2585	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/4072-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	[UNKNOWN]	ansible	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T07:46:47.224Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2018:2166",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:2166",
               },
               {
                  name: "RHSA-2018:2152",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:2152",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874",
               },
               {
                  name: "RHSA-2018:2150",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:2150",
               },
               {
                  name: "1041396",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1041396",
               },
               {
                  name: "RHBA-2018:3788",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHBA-2018:3788",
               },
               {
                  name: "RHSA-2019:0054",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:0054",
               },
               {
                  name: "RHSA-2018:2151",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:2151",
               },
               {
                  name: "RHSA-2018:2321",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:2321",
               },
               {
                  name: "RHSA-2018:2585",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:2585",
               },
               {
                  name: "USN-4072-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4072-1/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "ansible",
               vendor: "[UNKNOWN]",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-06-29T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-426",
                     description: "CWE-426",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-07-25T01:06:05",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2018:2166",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:2166",
            },
            {
               name: "RHSA-2018:2152",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:2152",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10874",
            },
            {
               name: "RHSA-2018:2150",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:2150",
            },
            {
               name: "1041396",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1041396",
            },
            {
               name: "RHBA-2018:3788",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHBA-2018:3788",
            },
            {
               name: "RHSA-2019:0054",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:0054",
            },
            {
               name: "RHSA-2018:2151",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:2151",
            },
            {
               name: "RHSA-2018:2321",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:2321",
            },
            {
               name: "RHSA-2018:2585",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:2585",
            },
            {
               name: "USN-4072-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4072-1/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2018-10874",
      datePublished: "2018-07-02T13:00:00",
      dateReserved: "2018-05-09T00:00:00",
      dateUpdated: "2024-08-05T07:46:47.224Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2016-8647 (GCVE-0-2016-8647)

Vulnerability from cvelistv5

Published

2018-07-26 14:00

Modified

2024-08-06 02:27

Severity ?

2.2 (Low) - CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N

Summary

An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1685	vendor-advisory, x_refsource_REDHAT
	https://github.com/ansible/ansible-modules-core/pull/5388	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8647	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Red Hat	Ansible	Version: 2.2.1.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T02:27:41.291Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2017:1685",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:1685",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/ansible/ansible-modules-core/pull/5388",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8647",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Ansible",
               vendor: "Red Hat",
               versions: [
                  {
                     status: "affected",
                     version: "2.2.1.0",
                  },
               ],
            },
         ],
         datePublic: "2016-10-26T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 2.2,
                  baseSeverity: "LOW",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "HIGH",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-20",
                     description: "CWE-20",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-07-27T09:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2017:1685",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:1685",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/ansible/ansible-modules-core/pull/5388",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8647",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2016-8647",
      datePublished: "2018-07-26T14:00:00",
      dateReserved: "2016-10-12T00:00:00",
      dateUpdated: "2024-08-06T02:27:41.291Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-5764 (GCVE-0-2023-5764)

Vulnerability from cvelistv5

Published

2023-12-12 22:01

Modified

2024-11-23 03:36

Severity ?

7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Summary

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2023:7773	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2023-5764	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2247629	issue-tracking, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

Red Hat

Red Hat Ansible Automation Platform 2.4 for RHEL 8

Unaffected: 1:2.15.8-1.el8ap   < *
    cpe:/a:redhat:ansible_automation_platform:2.4::el9
    cpe:/a:redhat:ansible_automation_platform:2.4::el8
    cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9
    cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9
    cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8
    cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8

Red Hat	Red Hat Ansible Automation Platform 2.4 for RHEL 8	Unaffected: 1:2.15.8-1.el8ap < * cpe:/a:redhat:ansible_automation_platform:2.4::el9 cpe:/a:redhat:ansible_automation_platform:2.4::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8 cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8
Red Hat	Red Hat Ansible Automation Platform 2.4 for RHEL 9	Unaffected: 1:2.15.8-1.el9ap < * cpe:/a:redhat:ansible_automation_platform:2.4::el9 cpe:/a:redhat:ansible_automation_platform:2.4::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8 cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8
Red Hat	Red Hat Ansible Automation Platform 2.4 for RHEL 9	Unaffected: 1:2.15.8-1.el9ap < * cpe:/a:redhat:ansible_automation_platform:2.4::el9 cpe:/a:redhat:ansible_automation_platform:2.4::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8 cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-5764",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-07-19T03:55:28.216152Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-08-16T19:39:40.920Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-10-25T13:07:31.611Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2023:7773",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2023:7773",
               },
               {
                  tags: [
                     "vdb-entry",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/cve/CVE-2023-5764",
               },
               {
                  name: "RHBZ#2247629",
                  tags: [
                     "issue-tracking",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=2247629",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7Q6CHPVCHMZS5M7V22GOKFSXZAQ24EU/",
               },
               {
                  url: "https://security.netapp.com/advisory/ntap-20241025-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
                  "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
                  "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "ansible-core",
               product: "Red Hat Ansible Automation Platform 2.4 for RHEL 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "1:2.15.8-1.el8ap",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
                  "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
                  "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "ansible-core",
               product: "Red Hat Ansible Automation Platform 2.4 for RHEL 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "1:2.15.8-1.el8ap",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
                  "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
                  "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "ansible-core",
               product: "Red Hat Ansible Automation Platform 2.4 for RHEL 9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "1:2.15.8-1.el9ap",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
                  "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
                  "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "ansible-core",
               product: "Red Hat Ansible Automation Platform 2.4 for RHEL 9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "1:2.15.8-1.el9ap",
                     versionType: "rpm",
                  },
               ],
            },
         ],
         datePublic: "2023-11-02T12:57:00+00:00",
         descriptions: [
            {
               lang: "en",
               value: "A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data.",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     namespace: "https://access.redhat.com/security/updates/classification/",
                     value: "Moderate",
                  },
                  type: "Red Hat severity rating",
               },
            },
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "NONE",
                  baseScore: 7.1,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
                  version: "3.1",
               },
               format: "CVSS",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-1336",
                     description: "Improper Neutralization of Special Elements Used in a Template Engine",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-11-23T03:36:26.977Z",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2023:7773",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2023:7773",
            },
            {
               tags: [
                  "vdb-entry",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/security/cve/CVE-2023-5764",
            },
            {
               name: "RHBZ#2247629",
               tags: [
                  "issue-tracking",
                  "x_refsource_REDHAT",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2247629",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2023-11-02T00:00:00+00:00",
               value: "Reported to Red Hat.",
            },
            {
               lang: "en",
               time: "2023-11-02T12:57:00+00:00",
               value: "Made public.",
            },
         ],
         title: "Ansible: template injection",
         x_redhatCweChain: "CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine",
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2023-5764",
      datePublished: "2023-12-12T22:01:33.467Z",
      dateReserved: "2023-10-25T10:27:46.601Z",
      dateUpdated: "2024-11-23T03:36:26.977Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2016-8628 (GCVE-0-2016-8628)

Vulnerability from cvelistv5

Published

2018-07-31 20:00

Modified

2024-08-06 02:27

Severity ?

7.6 (High) - CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Summary

Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2016:2778	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/94109	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8628	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Red Hat	Ansible	Version: 2.2.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T02:27:40.971Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2016:2778",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:2778",
               },
               {
                  name: "94109",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/94109",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8628",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Ansible",
               vendor: "Red Hat",
               versions: [
                  {
                     status: "affected",
                     version: "2.2.0",
                  },
               ],
            },
         ],
         datePublic: "2016-11-01T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.6,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "HIGH",
                  scope: "CHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-77",
                     description: "CWE-77",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-08-01T09:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2016:2778",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:2778",
            },
            {
               name: "94109",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/94109",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8628",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2016-8628",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Ansible",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "2.2.0",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Red Hat",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute arbitrary commands on Ansible clients as the user Ansible runs as.",
                  },
               ],
            },
            impact: {
               cvss: [
                  [
                     {
                        vectorString: "7.6/CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
                        version: "3.0",
                     },
                  ],
                  [
                     {
                        vectorString: "6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P",
                        version: "2.0",
                     },
                  ],
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-77",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2016:2778",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2016:2778",
                  },
                  {
                     name: "94109",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/94109",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8628",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8628",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2016-8628",
      datePublished: "2018-07-31T20:00:00",
      dateReserved: "2016-10-12T00:00:00",
      dateUpdated: "2024-08-06T02:27:40.971Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2024-1313 (GCVE-0-2024-1313)

Vulnerability from cvelistv5

Published

2024-03-26 17:24

Modified

2025-02-13 17:27

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Summary

It is possible for a user in a different organization from the owner of a snapshot to bypass authorization and delete a snapshot by issuing a DELETE request to /api/snapshots/<key> using its view key. This functionality is intended to only be available to individuals with the permission to write/edit to the snapshot in question, but due to a bug in the authorization logic, deletion requests issued by an unprivileged user in a different organization than the snapshot owner are treated as authorized. Grafana Labs would like to thank Ravid Mazon and Jay Chen of Palo Alto Research for discovering and disclosing this vulnerability. This issue affects Grafana: from 9.5.0 before 9.5.18, from 10.0.0 before 10.0.13, from 10.1.0 before 10.1.9, from 10.2.0 before 10.2.6, from 10.3.0 before 10.3.5.

References

▼	URL	Tags
	https://grafana.com/security/security-advisories/cve-2024-1313/
	https://security.netapp.com/advisory/ntap-20240524-0008/

Impacted products

	Vendor	Product	Version
	Grafana	Grafana	Version: 9.5.0 ≤ Version: 10.0.0 ≤ Version: 10.1.0 ≤ Version: 10.2.0 ≤ Version: 10.3.0 ≤

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-1313",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-06-10T20:46:01.440788Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-10T20:46:07.773Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-01T18:33:25.596Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://grafana.com/security/security-advisories/cve-2024-1313/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20240524-0008/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               platforms: [
                  "Linux",
               ],
               product: "Grafana",
               repo: "https://github.com/grafana/grafana",
               vendor: "Grafana",
               versions: [
                  {
                     lessThan: "9.5.18",
                     status: "affected",
                     version: "9.5.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "10.0.13",
                     status: "affected",
                     version: "10.0.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "10.1.9",
                     status: "affected",
                     version: "10.1.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "10.2.6",
                     status: "affected",
                     version: "10.2.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "10.3.5",
                     status: "affected",
                     version: "10.3.0",
                     versionType: "semver",
                  },
                  {
                     status: "unaffected",
                     version: "10.4.0",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "To be exposed to this issue, a grafana instance must be configured with multiple organizations and have the snapshots feature turned on.<br>",
                  },
               ],
               value: "To be exposed to this issue, a grafana instance must be configured with multiple organizations and have the snapshots feature turned on.",
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "Ravid Mazon",
            },
            {
               lang: "en",
               type: "finder",
               value: "Jay Chen",
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "It is possible for a user in a different organization from the owner of a snapshot to bypass authorization and delete a snapshot by issuing a DELETE request to /api/snapshots/&lt;key&gt; using its view key. This functionality is intended to only be available to individuals with the permission to write/edit to the snapshot in question, but due to a bug in the authorization logic, deletion requests issued by an unprivileged user in a different organization than the snapshot owner are treated as authorized.<br><p><br>Grafana Labs would like to thank Ravid Mazon and Jay Chen of Palo \nAlto Research for discovering and disclosing this vulnerability.<br><br>This issue affects Grafana: from 9.5.0 before 9.5.18, from 10.0.0 before 10.0.13, from 10.1.0 before 10.1.9, from 10.2.0 before 10.2.6, from 10.3.0 before 10.3.5.<br><br></p>",
                  },
               ],
               value: "It is possible for a user in a different organization from the owner of a snapshot to bypass authorization and delete a snapshot by issuing a DELETE request to /api/snapshots/<key> using its view key. This functionality is intended to only be available to individuals with the permission to write/edit to the snapshot in question, but due to a bug in the authorization logic, deletion requests issued by an unprivileged user in a different organization than the snapshot owner are treated as authorized.\n\nGrafana Labs would like to thank Ravid Mazon and Jay Chen of Palo \nAlto Research for discovering and disclosing this vulnerability.\n\nThis issue affects Grafana: from 9.5.0 before 9.5.18, from 10.0.0 before 10.0.13, from 10.1.0 before 10.1.9, from 10.2.0 before 10.2.6, from 10.3.0 before 10.3.5.",
            },
         ],
         impacts: [
            {
               capecId: "CAPEC-137",
               descriptions: [
                  {
                     lang: "en",
                     value: "CAPEC-137 Parameter Injection",
                  },
               ],
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-639",
                     description: "CWE-639 Authorization Bypass Through User-Controlled Key",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-06-10T18:08:06.260Z",
            orgId: "57da9224-a3e2-4646-9d0e-c4dc2e05e7da",
            shortName: "GRAFANA",
         },
         references: [
            {
               url: "https://grafana.com/security/security-advisories/cve-2024-1313/",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20240524-0008/",
            },
         ],
         source: {
            discovery: "EXTERNAL",
         },
         title: "Users outside an organization can delete a snapshot with its key",
         x_generator: {
            engine: "Vulnogram 0.1.0-dev",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "57da9224-a3e2-4646-9d0e-c4dc2e05e7da",
      assignerShortName: "GRAFANA",
      cveId: "CVE-2024-1313",
      datePublished: "2024-03-26T17:24:25.956Z",
      dateReserved: "2024-02-07T15:15:07.330Z",
      dateUpdated: "2025-02-13T17:27:36.664Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2016-9587 (GCVE-0-2016-9587)

Vulnerability from cvelistv5

Published

2018-04-24 16:00

Modified

2024-08-06 02:59

Severity ?

6.6 (Medium) - CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Summary

Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:0515	vendor-advisory, x_refsource_REDHAT
	https://www.exploit-db.com/exploits/41013/	exploit, x_refsource_EXPLOIT-DB
	https://security.gentoo.org/glsa/201701-77	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2017:1685	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/95352	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:0448	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9587	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0195.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0260.html	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	unspecified	Ansible	Version: ansible 2.1.4 Version: ansible 2.2.1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T02:59:02.537Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2017:0515",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:0515",
               },
               {
                  name: "41013",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/41013/",
               },
               {
                  name: "GLSA-201701-77",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-77",
               },
               {
                  name: "RHSA-2017:1685",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:1685",
               },
               {
                  name: "95352",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/95352",
               },
               {
                  name: "RHSA-2017:0448",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:0448",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9587",
               },
               {
                  name: "RHSA-2017:0195",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2017-0195.html",
               },
               {
                  name: "RHSA-2017:0260",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2017-0260.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Ansible",
               vendor: "unspecified",
               versions: [
                  {
                     status: "affected",
                     version: "ansible 2.1.4",
                  },
                  {
                     status: "affected",
                     version: " ansible 2.2.1",
                  },
               ],
            },
         ],
         datePublic: "2017-01-09T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 6.6,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "HIGH",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-20",
                     description: "CWE-20",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-04-25T09:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2017:0515",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:0515",
            },
            {
               name: "41013",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/41013/",
            },
            {
               name: "GLSA-201701-77",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-77",
            },
            {
               name: "RHSA-2017:1685",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:1685",
            },
            {
               name: "95352",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/95352",
            },
            {
               name: "RHSA-2017:0448",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:0448",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9587",
            },
            {
               name: "RHSA-2017:0195",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2017-0195.html",
            },
            {
               name: "RHSA-2017:0260",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2017-0260.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2016-9587",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Ansible",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "ansible 2.1.4",
                                       },
                                       {
                                          version_value: " ansible 2.2.1",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges.",
                  },
               ],
            },
            impact: {
               cvss: [
                  [
                     {
                        vectorString: "6.6/CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
                        version: "3.0",
                     },
                  ],
                  [
                     {
                        vectorString: "6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P",
                        version: "2.0",
                     },
                  ],
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-20",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2017:0515",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2017:0515",
                  },
                  {
                     name: "41013",
                     refsource: "EXPLOIT-DB",
                     url: "https://www.exploit-db.com/exploits/41013/",
                  },
                  {
                     name: "GLSA-201701-77",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201701-77",
                  },
                  {
                     name: "RHSA-2017:1685",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2017:1685",
                  },
                  {
                     name: "95352",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/95352",
                  },
                  {
                     name: "RHSA-2017:0448",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2017:0448",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9587",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9587",
                  },
                  {
                     name: "RHSA-2017:0195",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2017-0195.html",
                  },
                  {
                     name: "RHSA-2017:0260",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2017-0260.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2016-9587",
      datePublished: "2018-04-24T16:00:00",
      dateReserved: "2016-11-23T00:00:00",
      dateUpdated: "2024-08-06T02:59:02.537Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2024-0690 (GCVE-0-2024-0690)

Vulnerability from cvelistv5

Published

2024-02-06 12:00

Modified

2025-01-17 20:02

Severity ?

5.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Summary

An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2024:0733	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:2246	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2024:3043	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/security/cve/CVE-2024-0690	vdb-entry, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2259013	issue-tracking, x_refsource_REDHAT
	https://github.com/ansible/ansible/pull/82565

Impacted products

Vendor

Product

Version

▼

Version: 2.14.0   ≤
Version: 2.15.0   ≤
Version: 2.16.0   ≤

Red Hat	Red Hat Ansible Automation Platform 2.4 for RHEL 8	Unaffected: 1:2.15.9-1.el8ap < * cpe:/a:redhat:ansible_automation_platform:2.4::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9 cpe:/a:redhat:ansible_automation_platform:2.4::el8 cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8
Red Hat	Red Hat Ansible Automation Platform 2.4 for RHEL 9	Unaffected: 1:2.15.9-1.el9ap < * cpe:/a:redhat:ansible_automation_platform:2.4::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9 cpe:/a:redhat:ansible_automation_platform:2.4::el8 cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:2.16.3-2.el8 < * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 1:2.14.14-1.el9 < * cpe:/a:redhat:enterprise_linux:9::appstream

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-0690",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-02-06T18:30:30.103500Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-07-05T17:21:35.753Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2025-01-17T20:02:51.797Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2024:0733",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:0733",
               },
               {
                  name: "RHSA-2024:2246",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:2246",
               },
               {
                  name: "RHSA-2024:3043",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2024:3043",
               },
               {
                  tags: [
                     "vdb-entry",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/cve/CVE-2024-0690",
               },
               {
                  name: "RHBZ#2259013",
                  tags: [
                     "issue-tracking",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=2259013",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/ansible/ansible/pull/82565",
               },
               {
                  url: "https://security.netapp.com/advisory/ntap-20250117-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               collectionURL: "https://www.ansible.com/",
               defaultStatus: "unaffected",
               packageName: "ansible",
               versions: [
                  {
                     lessThan: "2.14.4",
                     status: "affected",
                     version: "2.14.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "2.15.9",
                     status: "affected",
                     version: "2.15.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "2.16.3",
                     status: "affected",
                     version: "2.16.0",
                     versionType: "semver",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8",
                  "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
                  "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "ansible-core",
               product: "Red Hat Ansible Automation Platform 2.4 for RHEL 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "1:2.15.9-1.el8ap",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el8",
                  "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
                  "cpe:/a:redhat:ansible_automation_platform_inside:2.4::el9",
                  "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
               ],
               defaultStatus: "affected",
               packageName: "ansible-core",
               product: "Red Hat Ansible Automation Platform 2.4 for RHEL 9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "1:2.15.9-1.el9ap",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:enterprise_linux:8::appstream",
               ],
               defaultStatus: "affected",
               packageName: "ansible-core",
               product: "Red Hat Enterprise Linux 8",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "0:2.16.3-2.el8",
                     versionType: "rpm",
                  },
               ],
            },
            {
               collectionURL: "https://access.redhat.com/downloads/content/package-browser/",
               cpes: [
                  "cpe:/a:redhat:enterprise_linux:9::appstream",
               ],
               defaultStatus: "affected",
               packageName: "ansible-core",
               product: "Red Hat Enterprise Linux 9",
               vendor: "Red Hat",
               versions: [
                  {
                     lessThan: "*",
                     status: "unaffected",
                     version: "1:2.14.14-1.el9",
                     versionType: "rpm",
                  },
               ],
            },
         ],
         datePublic: "2024-01-18T00:00:00+00:00",
         descriptions: [
            {
               lang: "en",
               value: "An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks, such as loop items. Depending on the task, this issue may include sensitive information, such as decrypted secret values.",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     namespace: "https://access.redhat.com/security/updates/classification/",
                     value: "Moderate",
                  },
                  type: "Red Hat severity rating",
               },
            },
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "NONE",
                  baseScore: 5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               format: "CVSS",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-117",
                     description: "Improper Output Neutralization for Logs",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-11-23T03:38:59.164Z",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2024:0733",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:0733",
            },
            {
               name: "RHSA-2024:2246",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:2246",
            },
            {
               name: "RHSA-2024:3043",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2024:3043",
            },
            {
               tags: [
                  "vdb-entry",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/security/cve/CVE-2024-0690",
            },
            {
               name: "RHBZ#2259013",
               tags: [
                  "issue-tracking",
                  "x_refsource_REDHAT",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2259013",
            },
            {
               url: "https://github.com/ansible/ansible/pull/82565",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2024-01-18T00:00:00+00:00",
               value: "Reported to Red Hat.",
            },
            {
               lang: "en",
               time: "2024-01-18T00:00:00+00:00",
               value: "Made public.",
            },
         ],
         title: "Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration",
         workarounds: [
            {
               lang: "en",
               value: "Explicitly setting 'no_log' within the playbook will prevent the output from containing potentially sensitive information.",
            },
         ],
         x_redhatCweChain: "CWE-117: Improper Output Neutralization for Logs",
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2024-0690",
      datePublished: "2024-02-06T12:00:28.505Z",
      dateReserved: "2024-01-18T16:03:22.626Z",
      dateUpdated: "2025-01-17T20:02:51.797Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2017-7550 (GCVE-0-2017-7550)

Vulnerability from cvelistv5

Published

2017-11-21 17:00

Modified

2024-08-05 16:04

Severity ?

Summary

A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1473645	x_refsource_CONFIRM
	https://github.com/ansible/ansible/issues/30874	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2966	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Red Hat, Inc.	ansible	Version: 2.3.x before 2.3.3, 2.4.x before 2.4.1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:04:12.039Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1473645",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/ansible/ansible/issues/30874",
               },
               {
                  name: "RHSA-2017:2966",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:2966",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "ansible",
               vendor: "Red Hat, Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "2.3.x before 2.3.3, 2.4.x before 2.4.1",
                  },
               ],
            },
         ],
         datePublic: "2017-07-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the \"params\" argument, and noting this in the module documentation.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-532",
                     description: "CWE-532",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-12-06T10:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1473645",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/ansible/ansible/issues/30874",
            },
            {
               name: "RHSA-2017:2966",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:2966",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2017-7550",
      datePublished: "2017-11-21T17:00:00Z",
      dateReserved: "2017-04-05T00:00:00",
      dateUpdated: "2024-08-05T16:04:12.039Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2020-1753 (GCVE-0-2020-1753)

Vulnerability from cvelistv5

Published

2020-03-16 14:37

Modified

2024-08-04 06:46

Severity ?

5.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Summary

A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed to kubectl from the command line, not using an environment variable or an input configuration file. This will disclose passwords and tokens from process list and no_log directive from debug module would not have any effect making these secrets being disclosed on stdout and log files.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753	x_refsource_CONFIRM
	https://github.com/ansible-collections/kubernetes/pull/51	x_refsource_CONFIRM
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202006-11	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2021/dsa-4950	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	Red Hat	Ansible	Version: all Ansible 2.7.x versions prior to 2.7.17 Version: all Ansible 2.8.x versions prior to 2.8.11 Version: all Ansible 2.9.x versions prior to 2.9.7

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T06:46:30.868Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/ansible-collections/kubernetes/pull/51",
               },
               {
                  name: "FEDORA-2020-1b6ce91e37",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/",
               },
               {
                  name: "FEDORA-2020-3990f03ba3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/",
               },
               {
                  name: "FEDORA-2020-f80154b5b4",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/",
               },
               {
                  name: "GLSA-202006-11",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202006-11",
               },
               {
                  name: "DSA-4950",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-4950",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Ansible",
               vendor: "Red Hat",
               versions: [
                  {
                     status: "affected",
                     version: "all Ansible 2.7.x versions prior to 2.7.17",
                  },
                  {
                     status: "affected",
                     version: "all Ansible 2.8.x versions prior to 2.8.11",
                  },
                  {
                     status: "affected",
                     version: "all Ansible 2.9.x versions prior to 2.9.7",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed to kubectl from the command line, not using an environment variable or an input configuration file. This will disclose passwords and tokens from process list and no_log directive from debug module would not have any effect making these secrets being disclosed on stdout and log files.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "NONE",
                  baseScore: 5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-200",
                     description: "CWE-200",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     cweId: "CWE-214",
                     description: "CWE-214",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     cweId: "CWE-532",
                     description: "CWE-532",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-08-07T14:06:13",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/ansible-collections/kubernetes/pull/51",
            },
            {
               name: "FEDORA-2020-1b6ce91e37",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/",
            },
            {
               name: "FEDORA-2020-3990f03ba3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/",
            },
            {
               name: "FEDORA-2020-f80154b5b4",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/",
            },
            {
               name: "GLSA-202006-11",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202006-11",
            },
            {
               name: "DSA-4950",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2021/dsa-4950",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-1753",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Ansible",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "all Ansible 2.7.x versions prior to 2.7.17",
                                       },
                                       {
                                          version_value: "all Ansible 2.8.x versions prior to 2.8.11",
                                       },
                                       {
                                          version_value: "all Ansible 2.9.x versions prior to 2.9.7",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Red Hat",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed to kubectl from the command line, not using an environment variable or an input configuration file. This will disclose passwords and tokens from process list and no_log directive from debug module would not have any effect making these secrets being disclosed on stdout and log files.",
                  },
               ],
            },
            impact: {
               cvss: [
                  [
                     {
                        vectorString: "5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
                        version: "3.0",
                     },
                  ],
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-200",
                        },
                     ],
                  },
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-214",
                        },
                     ],
                  },
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-532",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753",
                  },
                  {
                     name: "https://github.com/ansible-collections/kubernetes/pull/51",
                     refsource: "CONFIRM",
                     url: "https://github.com/ansible-collections/kubernetes/pull/51",
                  },
                  {
                     name: "FEDORA-2020-1b6ce91e37",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/",
                  },
                  {
                     name: "FEDORA-2020-3990f03ba3",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/",
                  },
                  {
                     name: "FEDORA-2020-f80154b5b4",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/",
                  },
                  {
                     name: "GLSA-202006-11",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202006-11",
                  },
                  {
                     name: "DSA-4950",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2021/dsa-4950",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-1753",
      datePublished: "2020-03-16T14:37:21",
      dateReserved: "2019-11-27T00:00:00",
      dateUpdated: "2024-08-04T06:46:30.868Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-6152 (GCVE-0-2023-6152)

Vulnerability from cvelistv5

Published

2024-02-13 21:38

Modified

2025-02-15 00:10

Severity ?

5.4 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Summary

A user changing their email after signing up and verifying it can change it without verification in profile settings. The configuration option "verify_email_enabled" will only validate email only on sign up.

References

▼	URL	Tags
	https://grafana.com/security/security-advisories/cve-2023-6152/
	https://github.com/grafana/bugbounty/security/advisories/GHSA-3hv4-r2fm-h27f

Impacted products

Vendor

Product

Version

▼

Grafana

Version: 2.5.0   ≤
Version: 10.0.0   ≤
Version: 10.1.0   ≤
Version: 10.2.0   ≤
Version: 10.3.0   ≤

Grafana

Grafana Enterprise

Version: 2.5.0   ≤
Version: 10.0.0   ≤
Version: 10.1.0   ≤
Version: 10.2.0   ≤
Version: 10.3.0   ≤

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2025-02-15T00:10:28.890Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://grafana.com/security/security-advisories/cve-2023-6152/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/grafana/bugbounty/security/advisories/GHSA-3hv4-r2fm-h27f",
               },
               {
                  url: "https://security.netapp.com/advisory/ntap-20250214-0008/",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "grafana",
                  vendor: "grafana",
                  versions: [
                     {
                        lessThan: "9.5.16",
                        status: "affected",
                        version: "2.5.0",
                        versionType: "custom",
                     },
                     {
                        lessThan: "10.0.11",
                        status: "affected",
                        version: "10.0.0",
                        versionType: "custom",
                     },
                     {
                        lessThan: "10.1.7",
                        status: "affected",
                        version: "10.10",
                        versionType: "custom",
                     },
                     {
                        lessThan: "10.2.4",
                        status: "affected",
                        version: "10.2.0",
                        versionType: "custom",
                     },
                     {
                        lessThan: "10.3.3",
                        status: "affected",
                        version: "10.3.0",
                        versionType: "custom",
                     },
                  ],
               },
               {
                  cpes: [
                     "cpe:2.3:a:grafana:grafana_enterprise:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "grafana_enterprise",
                  vendor: "grafana",
                  versions: [
                     {
                        lessThan: "9.5.16",
                        status: "affected",
                        version: "2.5.0",
                        versionType: "custom",
                     },
                     {
                        lessThan: "10.0.11",
                        status: "affected",
                        version: "10.0.0",
                        versionType: "custom",
                     },
                     {
                        lessThan: "10.1.7",
                        status: "affected",
                        version: "10.10",
                        versionType: "custom",
                     },
                     {
                        lessThan: "10.2.4",
                        status: "affected",
                        version: "10.2.0",
                        versionType: "custom",
                     },
                     {
                        lessThan: "10.3.3",
                        status: "affected",
                        version: "10.3.0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-6152",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-08-22T15:42:45.786092Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-08-22T15:51:56.870Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Grafana",
               vendor: "Grafana",
               versions: [
                  {
                     lessThan: "9.5.16",
                     status: "affected",
                     version: "2.5.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "10.0.11",
                     status: "affected",
                     version: "10.0.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "10.1.7",
                     status: "affected",
                     version: "10.1.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "10.2.4",
                     status: "affected",
                     version: "10.2.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "10.3.3",
                     status: "affected",
                     version: "10.3.0",
                     versionType: "semver",
                  },
               ],
            },
            {
               product: "Grafana Enterprise",
               vendor: "Grafana",
               versions: [
                  {
                     lessThan: "9.5.16",
                     status: "affected",
                     version: "2.5.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "10.0.11",
                     status: "affected",
                     version: "10.0.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "10.1.7",
                     status: "affected",
                     version: "10.1.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "10.2.4",
                     status: "affected",
                     version: "10.2.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "10.3.3",
                     status: "affected",
                     version: "10.3.0",
                     versionType: "semver",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>A user changing their email after signing up and verifying it can change it without verification in profile settings.</p><p>The configuration option \"verify_email_enabled\" will only validate email only on sign up.</p>",
                  },
               ],
               value: "A user changing their email after signing up and verifying it can change it without verification in profile settings.\n\nThe configuration option \"verify_email_enabled\" will only validate email only on sign up.\n\n",
            },
         ],
         impacts: [
            {
               capecId: "CAPEC-115",
               descriptions: [
                  {
                     lang: "en",
                     value: "CAPEC-115",
                  },
               ],
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 5.4,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-863",
                     description: "CWE-863",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-02-13T21:38:01.404Z",
            orgId: "57da9224-a3e2-4646-9d0e-c4dc2e05e7da",
            shortName: "GRAFANA",
         },
         references: [
            {
               url: "https://grafana.com/security/security-advisories/cve-2023-6152/",
            },
            {
               url: "https://github.com/grafana/bugbounty/security/advisories/GHSA-3hv4-r2fm-h27f",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "57da9224-a3e2-4646-9d0e-c4dc2e05e7da",
      assignerShortName: "GRAFANA",
      cveId: "CVE-2023-6152",
      datePublished: "2024-02-13T21:38:01.404Z",
      dateReserved: "2023-11-15T12:44:28.824Z",
      dateUpdated: "2025-02-15T00:10:28.890Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

CVE-2016-8614 (GCVE-0-2016-8614)

Vulnerability from cvelistv5

CVE-2020-14332 (GCVE-0-2020-14332)

Vulnerability from cvelistv5

CVE-2020-14330 (GCVE-0-2020-14330)

Vulnerability from cvelistv5

CVE-2020-14365 (GCVE-0-2020-14365)

Vulnerability from cvelistv5

CVE-2020-10744 (GCVE-0-2020-10744)

Vulnerability from cvelistv5

CVE-2018-10874 (GCVE-0-2018-10874)

Vulnerability from cvelistv5

CVE-2016-8647 (GCVE-0-2016-8647)

Vulnerability from cvelistv5

CVE-2023-5764 (GCVE-0-2023-5764)

Vulnerability from cvelistv5

CVE-2016-8628 (GCVE-0-2016-8628)

Vulnerability from cvelistv5

CVE-2024-1313 (GCVE-0-2024-1313)

Vulnerability from cvelistv5

CVE-2016-9587 (GCVE-0-2016-9587)

Vulnerability from cvelistv5

CVE-2024-0690 (GCVE-0-2024-0690)

Vulnerability from cvelistv5

CVE-2017-7550 (GCVE-0-2017-7550)

Vulnerability from cvelistv5

CVE-2020-1753 (GCVE-0-2020-1753)

Vulnerability from cvelistv5

CVE-2023-6152 (GCVE-0-2023-6152)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature