CVE-2019-18905

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux Enterprise Server 12 autoyast2 version 4.1.9-3.9.1 and prior versions. SUSE Linux Enterprise Server 15 autoyast2 version 4.0.70-3.20.1 and prior versions.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-345

Affected software

No affected versions have been published.

Timeline

Published: Apr 3, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-189069.8A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers CVE-2019-189098.0The VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that CVE-2019-18917.5A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remot CVE-2019-189106.8The Citrix Receiver wrapper function does not safely handle user supplied input, which may be leveraged by an attacker to inject commands th CVE-2019-189127.8A potential security vulnerability has been identified for certain HP printers and MFPs with Troy solutions. For affected printers with Futu CVE-2019-189136.8A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide CVE-2019-189146.1A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripti CVE-2019-189157.8A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version 1.4.33. This vulner CVE-2019-189167.8A potential security vulnerability has been identified for HP LaserJet Solution Software (for certain HP LaserJet Printers) which may lead t CVE-2019-189176.5A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout.CVE-2019-18927.5A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches c CVE-2019-189227.5A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.00.047] allows unauthenticated