CVE catalog
CVE-2019-10137
Security update for SUSE Manager Server 3.2
- Severity
- High · CVSS 8.1
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 3.12% · Oct 25, 2026
This update fixes the following issues: release-notes-susemanager: - Fix invalid characters in ncurses mode (bsc#1102770) spacewalk-backend: - Fix for CVE-2019-10136. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum. (bsc#1136480) spacewalk-web: - Change WebUI string version to 3.2.9
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Suse | release-notes-susemanager-proxy | manager proxy 3.2 | 3.2.9-0.16.27.1 | fixed |
| Suse | spacewalk-backend | manager proxy 3.2 | 2.8.57.17-3.33.1 | fixed |
| Suse | spacewalk-proxy | manager proxy 3.2 | 2.8.5.6-3.11.1 | fixed |
| Suse | spacewalk-web | manager proxy 3.2 | 2.8.7.17-3.30.1 | fixed |
| Suse | release-notes-susemanager | manager server 3.2 | 3.2.9-6.35.1 | fixed |
| Suse | spacewalk-backend | manager server 3.2 | 2.8.57.17-3.33.1 | fixed |
| Suse | spacewalk-web | manager server 3.2 | 2.8.7.17-3.30.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | release-notes-susemanager-proxy | rpm | manager proxy 3.2 | 3.2.9-0.16.27.1 | Not reported | SUSE-SU-2019:1790-1 | Not reported |
| Suse | spacewalk-backend | rpm | manager proxy 3.2 | 2.8.57.17-3.33.1 | Not reported | SUSE-SU-2019:1790-1 | Not reported |
| Suse | spacewalk-proxy | rpm | manager proxy 3.2 | 2.8.5.6-3.11.1 | Not reported | SUSE-SU-2019:1790-1 | Not reported |
| Suse | spacewalk-web | rpm | manager proxy 3.2 | 2.8.7.17-3.30.1 | Not reported | SUSE-SU-2019:1790-1 | Not reported |
| Suse | release-notes-susemanager | rpm | manager server 3.2 | 3.2.9-6.35.1 | Not reported | SUSE-SU-2019:1790-1 | Not reported |
| Suse | spacewalk-backend | rpm | manager server 3.2 | 2.8.57.17-3.33.1 | Not reported | SUSE-SU-2019:1790-1 | Not reported |
| Suse | spacewalk-web | rpm | manager server 3.2 | 2.8.7.17-3.30.1 | Not reported | SUSE-SU-2019:1790-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1789-1.json]
- [https://osv.dev/vulnerability/SUSE-SU-2019:1790-1]
- [https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-10137.json]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]