CVE catalog

CVE-2019-10136

Security update for SUSE Manager Client Tools

[CVE catalog]

Severity
Medium · CVSS 4.3CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.56% · Oct 25, 2026

This update fixes the following issues: release-notes-susemanager: - Fix invalid characters in ncurses mode (bsc#1102770) spacewalk-backend: - Fix for CVE-2019-10136. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum. (bsc#1136480) spacewalk-web: - Change WebUI string version to 3.2.9

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Suserelease-notes-susemanager-proxymanager proxy 3.23.2.9-0.16.27.1fixed
Susespacewalk-backendmanager proxy 3.22.8.57.17-3.33.1fixed
Susespacewalk-proxymanager proxy 3.22.8.5.6-3.11.1fixed
Susespacewalk-webmanager proxy 3.22.8.7.17-3.30.1fixed
Suserelease-notes-susemanagermanager server 3.23.2.9-6.35.1fixed
Susespacewalk-backendmanager server 3.22.8.57.17-3.33.1fixed
Susespacewalk-webmanager server 3.22.8.7.17-3.30.1fixed
Susegolang-github-prometheus-prometheusmanager client tools 122.11.1-1.6.2fixed
Susekiwi-desc-saltbootmanager client tools 120.1.1564399963.cf19a13-1.12.1fixed
Susemgr-cfgmanager client tools 124.0.9-1.6.4fixed
Susemgr-daemonmanager client tools 124.0.7-1.8.2fixed
Susemgr-osadmanager client tools 124.0.9-1.6.2fixed
Susemgr-virtualizationmanager client tools 124.0.8-1.8.3fixed
Suserhnlibmanager client tools 124.0.11-21.16.1fixed
Susespacecmdmanager client tools 124.0.14-38.49.1fixed
Susespacewalk-backendmanager client tools 124.0.25-55.41.1fixed
Susespacewalk-remote-utilsmanager client tools 124.0.5-24.12.2fixed
Susegolang-github-prometheus-alertmanagermanager client tools 150.16.2-3.3.1fixed
Susegolang-github-prometheus-prometheusmanager client tools 152.11.1-3.6.2fixed
Susemgr-cfgmanager client tools 154.0.9-1.6.5fixed
Susemgr-daemonmanager client tools 154.0.7-1.8.1fixed
Susemgr-osadmanager client tools 154.0.9-1.6.2fixed
Susemgr-virtualizationmanager client tools 154.0.8-1.8.4fixed
Suserhnlibmanager client tools 154.0.11-3.10.1fixed
Susespacecmdmanager client tools 154.0.14-3.26.1fixed
Susespacewalk-backendmanager client tools 154.0.25-3.23.1fixed
Susespacewalk-remote-utilsmanager client tools 154.0.5-3.9.2fixed
Susespacewalk-backendmanager proxy module 4.04.0.22-3.3.1fixed
Susespacewalk-proxymanager proxy module 4.04.0.12-3.3.1fixed
Susespacewalk-webmanager proxy module 4.04.0.14-3.3.1fixed
Susespacewalk-backendmanager server module 4.04.0.22-3.3.1fixed
Susespacewalk-webmanager server module 4.04.0.14-3.3.1fixed
Susesusemanager-doc-indexesmanager server module 4.04.0-10.3.1fixed
Susesusemanager-docs_enmanager server module 4.04.0-10.3.1fixed
Susesusemanager-sync-datamanager server module 4.04.0.12-3.3.1fixed
Susemgr-cfglinux enterprise server 11 sp3-client-tools4.0.9-5.6.3fixed
Susemgr-daemonlinux enterprise server 11 sp3-client-tools4.0.7-5.8.2fixed
Susemgr-osadlinux enterprise server 11 sp3-client-tools4.0.9-5.6.2fixed
Susemgr-virtualizationlinux enterprise server 11 sp3-client-tools4.0.8-5.8.3fixed
Suserhnliblinux enterprise server 11 sp3-client-tools4.0.11-12.16.1fixed
Susespacecmdlinux enterprise server 11 sp3-client-tools4.0.14-18.51.1fixed
Susespacewalk-backendlinux enterprise server 11 sp3-client-tools4.0.25-28.42.1fixed
Susespacewalk-remote-utilslinux enterprise server 11 sp3-client-tools4.0.5-6.12.2fixed
Susemgr-cfglinux enterprise server 11 sp4-client-tools4.0.9-5.6.3fixed
Susemgr-daemonlinux enterprise server 11 sp4-client-tools4.0.7-5.8.2fixed
Susemgr-osadlinux enterprise server 11 sp4-client-tools4.0.9-5.6.2fixed
Susemgr-virtualizationlinux enterprise server 11 sp4-client-tools4.0.8-5.8.3fixed
Suserhnliblinux enterprise server 11 sp4-client-tools4.0.11-12.16.1fixed
Susespacecmdlinux enterprise server 11 sp4-client-tools4.0.14-18.51.1fixed
Susespacewalk-backendlinux enterprise server 11 sp4-client-tools4.0.25-28.42.1fixed
Susespacewalk-remote-utilslinux enterprise server 11 sp4-client-tools4.0.5-6.12.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Suserelease-notes-susemanager-proxyrpmmanager proxy 3.23.2.9-0.16.27.1Not reportedSUSE-SU-2019:1790-1Not reported
Susespacewalk-backendrpmmanager proxy 3.22.8.57.17-3.33.1Not reportedSUSE-SU-2019:1790-1Not reported
Susespacewalk-proxyrpmmanager proxy 3.22.8.5.6-3.11.1Not reportedSUSE-SU-2019:1790-1Not reported
Susespacewalk-webrpmmanager proxy 3.22.8.7.17-3.30.1Not reportedSUSE-SU-2019:1790-1Not reported
Suserelease-notes-susemanagerrpmmanager server 3.23.2.9-6.35.1Not reportedSUSE-SU-2019:1790-1Not reported
Susespacewalk-backendrpmmanager server 3.22.8.57.17-3.33.1Not reportedSUSE-SU-2019:1790-1Not reported
Susespacewalk-webrpmmanager server 3.22.8.7.17-3.30.1Not reportedSUSE-SU-2019:1790-1Not reported
Susegolang-github-prometheus-prometheusrpmmanager client tools 122.11.1-1.6.2Not reportedSUSE-SU-2019:2312-1Not reported
Susekiwi-desc-saltbootrpmmanager client tools 120.1.1564399963.cf19a13-1.12.1Not reportedSUSE-SU-2019:2312-1Not reported
Susemgr-cfgrpmmanager client tools 124.0.9-1.6.4Not reportedSUSE-SU-2019:2312-1Not reported
Susemgr-daemonrpmmanager client tools 124.0.7-1.8.2Not reportedSUSE-SU-2019:2312-1Not reported
Susemgr-osadrpmmanager client tools 124.0.9-1.6.2Not reportedSUSE-SU-2019:2312-1Not reported
Susemgr-virtualizationrpmmanager client tools 124.0.8-1.8.3Not reportedSUSE-SU-2019:2312-1Not reported
Suserhnlibrpmmanager client tools 124.0.11-21.16.1Not reportedSUSE-SU-2019:2312-1Not reported
Susespacecmdrpmmanager client tools 124.0.14-38.49.1Not reportedSUSE-SU-2019:2312-1Not reported
Susespacewalk-backendrpmmanager client tools 124.0.25-55.41.1Not reportedSUSE-SU-2019:2312-1Not reported
Susespacewalk-remote-utilsrpmmanager client tools 124.0.5-24.12.2Not reportedSUSE-SU-2019:2312-1Not reported
Susegolang-github-prometheus-alertmanagerrpmmanager client tools 150.16.2-3.3.1Not reportedSUSE-SU-2019:2317-1Not reported
Susegolang-github-prometheus-prometheusrpmmanager client tools 152.11.1-3.6.2Not reportedSUSE-SU-2019:2317-1Not reported
Susemgr-cfgrpmmanager client tools 154.0.9-1.6.5Not reportedSUSE-SU-2019:2317-1Not reported
Susemgr-daemonrpmmanager client tools 154.0.7-1.8.1Not reportedSUSE-SU-2019:2317-1Not reported
Susemgr-osadrpmmanager client tools 154.0.9-1.6.2Not reportedSUSE-SU-2019:2317-1Not reported
Susemgr-virtualizationrpmmanager client tools 154.0.8-1.8.4Not reportedSUSE-SU-2019:2317-1Not reported
Suserhnlibrpmmanager client tools 154.0.11-3.10.1Not reportedSUSE-SU-2019:2317-1Not reported
Susespacecmdrpmmanager client tools 154.0.14-3.26.1Not reportedSUSE-SU-2019:2317-1Not reported
Susespacewalk-backendrpmmanager client tools 154.0.25-3.23.1Not reportedSUSE-SU-2019:2317-1Not reported
Susespacewalk-remote-utilsrpmmanager client tools 154.0.5-3.9.2Not reportedSUSE-SU-2019:2317-1Not reported
Susespacewalk-backendrpmmanager proxy module 4.04.0.22-3.3.1Not reportedSUSE-SU-2019:1789-1Not reported
Susespacewalk-proxyrpmmanager proxy module 4.04.0.12-3.3.1Not reportedSUSE-SU-2019:1789-1Not reported
Susespacewalk-webrpmmanager proxy module 4.04.0.14-3.3.1Not reportedSUSE-SU-2019:1789-1Not reported
Susespacewalk-backendrpmmanager server module 4.04.0.22-3.3.1Not reportedSUSE-SU-2019:1789-1Not reported
Susespacewalk-webrpmmanager server module 4.04.0.14-3.3.1Not reportedSUSE-SU-2019:1789-1Not reported
Susesusemanager-doc-indexesrpmmanager server module 4.04.0-10.3.1Not reportedSUSE-SU-2019:1789-1Not reported
Susesusemanager-docs_enrpmmanager server module 4.04.0-10.3.1Not reportedSUSE-SU-2019:1789-1Not reported
Susesusemanager-sync-datarpmmanager server module 4.04.0.12-3.3.1Not reportedSUSE-SU-2019:1789-1Not reported
Susemgr-cfgrpmlinux enterprise server 11 sp3-client-tools4.0.9-5.6.3Not reportedSUSE-SU-2019:14163-1Not reported
Susemgr-daemonrpmlinux enterprise server 11 sp3-client-tools4.0.7-5.8.2Not reportedSUSE-SU-2019:14163-1Not reported
Susemgr-osadrpmlinux enterprise server 11 sp3-client-tools4.0.9-5.6.2Not reportedSUSE-SU-2019:14163-1Not reported
Susemgr-virtualizationrpmlinux enterprise server 11 sp3-client-tools4.0.8-5.8.3Not reportedSUSE-SU-2019:14163-1Not reported
Suserhnlibrpmlinux enterprise server 11 sp3-client-tools4.0.11-12.16.1Not reportedSUSE-SU-2019:14163-1Not reported
Susespacecmdrpmlinux enterprise server 11 sp3-client-tools4.0.14-18.51.1Not reportedSUSE-SU-2019:14163-1Not reported
Susespacewalk-backendrpmlinux enterprise server 11 sp3-client-tools4.0.25-28.42.1Not reportedSUSE-SU-2019:14163-1Not reported
Susespacewalk-remote-utilsrpmlinux enterprise server 11 sp3-client-tools4.0.5-6.12.2Not reportedSUSE-SU-2019:14163-1Not reported
Susemgr-cfgrpmlinux enterprise server 11 sp4-client-tools4.0.9-5.6.3Not reportedSUSE-SU-2019:14163-1Not reported
Susemgr-daemonrpmlinux enterprise server 11 sp4-client-tools4.0.7-5.8.2Not reportedSUSE-SU-2019:14163-1Not reported
Susemgr-osadrpmlinux enterprise server 11 sp4-client-tools4.0.9-5.6.2Not reportedSUSE-SU-2019:14163-1Not reported
Susemgr-virtualizationrpmlinux enterprise server 11 sp4-client-tools4.0.8-5.8.3Not reportedSUSE-SU-2019:14163-1Not reported
Suserhnlibrpmlinux enterprise server 11 sp4-client-tools4.0.11-12.16.1Not reportedSUSE-SU-2019:14163-1Not reported
Susespacecmdrpmlinux enterprise server 11 sp4-client-tools4.0.14-18.51.1Not reportedSUSE-SU-2019:14163-1Not reported
Susespacewalk-backendrpmlinux enterprise server 11 sp4-client-tools4.0.25-28.42.1Not reportedSUSE-SU-2019:14163-1Not reported
Susespacewalk-remote-utilsrpmlinux enterprise server 11 sp4-client-tools4.0.5-6.12.2Not reportedSUSE-SU-2019:14163-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]