CVE catalog

CVE-2022-31254

rmt-server-2.12-1.1 on GA media

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.25% · Oct 25, 2026

This update for rmt-server fixes the following issues: Update to version 2.10: - Add option to turn off system token support (bsc#1205089) - Update the `last_seen_at` column on zypper service refresh - Do not retry to import non-existing files in air-gapped mode (bsc#1204769) - CVE-2022-31254: Fixed a local privilege escalation related to the packaging of rmt-server (bsc#1204285).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susermt-serverlinux enterprise module for public cloud 15 sp42.10-150400.3.9.1fixed
Susermt-serverlinux enterprise module for server applications 15 sp42.10-150400.3.9.1fixed
Opensusermt-serverleap 15.42.10-150400.3.9.1fixed
Susermt-serverlinux enterprise module for public cloud 15 sp52.13-150500.3.3.1fixed
Susermt-serverlinux enterprise module for server applications 15 sp52.13-150500.3.3.1fixed
Opensusermt-serverleap 15.52.13-150500.3.3.1fixed
Susermt-serverlinux enterprise module for public cloud 15 sp22.10-150200.3.29.1fixed
Susermt-serverlinux enterprise high performance computing 15 sp2-ltss2.10-150200.3.29.1fixed
Susermt-serverlinux enterprise server 15 sp2-bcl2.10-150200.3.29.1fixed
Susermt-serverlinux enterprise server 15 sp2-ltss2.10-150200.3.29.1fixed
Susermt-serverlinux enterprise server for sap applications 15 sp22.10-150200.3.29.1fixed
Susermt-servermanager proxy 4.12.10-150200.3.29.1fixed
Susermt-servermanager retail branch server 4.12.10-150200.3.29.1fixed
Susermt-servermanager server 4.12.10-150200.3.29.1fixed
Susermt-serverenterprise storage 72.10-150200.3.29.1fixed
Susermt-serverlinux enterprise module for public cloud 15 sp12.10-150100.3.42.1fixed
Susermt-serverlinux enterprise high performance computing 15 sp1-ltss2.10-150100.3.42.1fixed
Susermt-serverlinux enterprise server 15 sp1-bcl2.10-150100.3.42.1fixed
Susermt-serverlinux enterprise server 15 sp1-ltss2.10-150100.3.42.1fixed
Susermt-serverlinux enterprise server for sap applications 15 sp12.10-150100.3.42.1fixed
Susermt-serverenterprise storage 62.10-150100.3.42.1fixed
Susermt-serverlinux enterprise high performance computing 15-espos2.10-150000.3.61.1fixed
Susermt-serverlinux enterprise high performance computing 15-ltss2.10-150000.3.61.1fixed
Susermt-serverlinux enterprise server 15-ltss2.10-150000.3.61.1fixed
Susermt-serverlinux enterprise server for sap applications 152.10-150000.3.61.1fixed
Susermt-serverlinux enterprise module for public cloud 15 sp32.10-150300.3.21.1fixed
Susermt-serverlinux enterprise module for server applications 15 sp32.10-150300.3.21.1fixed
Susermt-serverlinux enterprise high performance computing 15 sp3-espos2.10-150300.3.21.1fixed
Susermt-serverlinux enterprise high performance computing 15 sp3-ltss2.10-150300.3.21.1fixed
Susermt-serverlinux enterprise real time 15 sp32.10-150300.3.21.1fixed
Susermt-serverlinux enterprise server 15 sp3-bcl2.10-150300.3.21.1fixed
Susermt-serverlinux enterprise server 15 sp3-ltss2.10-150300.3.21.1fixed
Susermt-serverlinux enterprise server for sap applications 15 sp32.10-150300.3.21.1fixed
Susermt-servermanager proxy 4.22.10-150300.3.21.1fixed
Susermt-servermanager retail branch server 4.22.10-150300.3.21.1fixed
Susermt-servermanager server 4.22.10-150300.3.21.1fixed
Susermt-serverenterprise storage 7.12.10-150300.3.21.1fixed
Opensusermt-serverleap 15.32.10-150300.3.21.1fixed
Opensusermt-servertumbleweed2.12-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susermt-serverrpmlinux enterprise module for public cloud 15 sp42.10-150400.3.9.1Not reportedSUSE-SU-2023:0019-1Not reported
Susermt-serverrpmlinux enterprise module for server applications 15 sp42.10-150400.3.9.1Not reportedSUSE-SU-2023:0019-1Not reported
Opensusermt-serverrpmleap 15.42.10-150400.3.9.1Not reportedSUSE-SU-2023:0019-1Not reported
Susermt-serverrpmlinux enterprise module for public cloud 15 sp52.13-150500.3.3.1Not reportedSUSE-SU-2023:2781-1Not reported
Susermt-serverrpmlinux enterprise module for server applications 15 sp52.13-150500.3.3.1Not reportedSUSE-SU-2023:2781-1Not reported
Opensusermt-serverrpmleap 15.52.13-150500.3.3.1Not reportedSUSE-SU-2023:2781-1Not reported
Susermt-serverrpmlinux enterprise module for public cloud 15 sp22.10-150200.3.29.1Not reportedSUSE-SU-2023:0023-1Not reported
Susermt-serverrpmlinux enterprise high performance computing 15 sp2-ltss2.10-150200.3.29.1Not reportedSUSE-SU-2023:0023-1Not reported
Susermt-serverrpmlinux enterprise server 15 sp2-bcl2.10-150200.3.29.1Not reportedSUSE-SU-2023:0023-1Not reported
Susermt-serverrpmlinux enterprise server 15 sp2-ltss2.10-150200.3.29.1Not reportedSUSE-SU-2023:0023-1Not reported
Susermt-serverrpmlinux enterprise server for sap applications 15 sp22.10-150200.3.29.1Not reportedSUSE-SU-2023:0023-1Not reported
Susermt-serverrpmmanager proxy 4.12.10-150200.3.29.1Not reportedSUSE-SU-2023:0023-1Not reported
Susermt-serverrpmmanager retail branch server 4.12.10-150200.3.29.1Not reportedSUSE-SU-2023:0023-1Not reported
Susermt-serverrpmmanager server 4.12.10-150200.3.29.1Not reportedSUSE-SU-2023:0023-1Not reported
Susermt-serverrpmenterprise storage 72.10-150200.3.29.1Not reportedSUSE-SU-2023:0023-1Not reported
Susermt-serverrpmlinux enterprise module for public cloud 15 sp12.10-150100.3.42.1Not reportedSUSE-SU-2023:0022-1Not reported
Susermt-serverrpmlinux enterprise high performance computing 15 sp1-ltss2.10-150100.3.42.1Not reportedSUSE-SU-2023:0022-1Not reported
Susermt-serverrpmlinux enterprise server 15 sp1-bcl2.10-150100.3.42.1Not reportedSUSE-SU-2023:0022-1Not reported
Susermt-serverrpmlinux enterprise server 15 sp1-ltss2.10-150100.3.42.1Not reportedSUSE-SU-2023:0022-1Not reported
Susermt-serverrpmlinux enterprise server for sap applications 15 sp12.10-150100.3.42.1Not reportedSUSE-SU-2023:0022-1Not reported
Susermt-serverrpmenterprise storage 62.10-150100.3.42.1Not reportedSUSE-SU-2023:0022-1Not reported
Susermt-serverrpmlinux enterprise high performance computing 15-espos2.10-150000.3.61.1Not reportedSUSE-SU-2023:0021-1Not reported
Susermt-serverrpmlinux enterprise high performance computing 15-ltss2.10-150000.3.61.1Not reportedSUSE-SU-2023:0021-1Not reported
Susermt-serverrpmlinux enterprise server 15-ltss2.10-150000.3.61.1Not reportedSUSE-SU-2023:0021-1Not reported
Susermt-serverrpmlinux enterprise server for sap applications 152.10-150000.3.61.1Not reportedSUSE-SU-2023:0021-1Not reported
Susermt-serverrpmlinux enterprise module for public cloud 15 sp32.10-150300.3.21.1Not reportedSUSE-SU-2023:0020-1Not reported
Susermt-serverrpmlinux enterprise module for server applications 15 sp32.10-150300.3.21.1Not reportedSUSE-SU-2023:0020-1Not reported
Susermt-serverrpmlinux enterprise high performance computing 15 sp3-espos2.10-150300.3.21.1Not reportedSUSE-SU-2023:0020-1Not reported
Susermt-serverrpmlinux enterprise high performance computing 15 sp3-ltss2.10-150300.3.21.1Not reportedSUSE-SU-2023:0020-1Not reported
Susermt-serverrpmlinux enterprise real time 15 sp32.10-150300.3.21.1Not reportedSUSE-SU-2023:0020-1Not reported
Susermt-serverrpmlinux enterprise server 15 sp3-bcl2.10-150300.3.21.1Not reportedSUSE-SU-2023:0020-1Not reported
Susermt-serverrpmlinux enterprise server 15 sp3-ltss2.10-150300.3.21.1Not reportedSUSE-SU-2023:0020-1Not reported
Susermt-serverrpmlinux enterprise server for sap applications 15 sp32.10-150300.3.21.1Not reportedSUSE-SU-2023:0020-1Not reported
Susermt-serverrpmmanager proxy 4.22.10-150300.3.21.1Not reportedSUSE-SU-2023:0020-1Not reported
Susermt-serverrpmmanager retail branch server 4.22.10-150300.3.21.1Not reportedSUSE-SU-2023:0020-1Not reported
Susermt-serverrpmmanager server 4.22.10-150300.3.21.1Not reportedSUSE-SU-2023:0020-1Not reported
Susermt-serverrpmenterprise storage 7.12.10-150300.3.21.1Not reportedSUSE-SU-2023:0020-1Not reported
Opensusermt-serverrpmleap 15.32.10-150300.3.21.1Not reportedSUSE-SU-2023:0020-1Not reported
Opensusermt-serverrpmtumbleweed2.12-1.1Not reportedOPENSUSE-SU-2024:12886-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]