CVE:CVE-2022-43753
CNNVD:CNNVD-202211-2532
SUSE Linux Enterprise Server是德国SUSE公司的一套企业服务器版Linux操作系统。
SUSE Linux Enterprise Server 存在路径遍历漏洞。远程攻击者利用该漏洞可以读取运行进程的用户的文件。以下产品及版本受到影响：SUSE Manager Server 4.2 hub-xmlrpc-api-0.7-150300.3.9.2、inter-Server-sync-0.2.4-150300.8.25.2、locale-formula-0.3-150300.3.3.2、py27-compat-salt-3000.3-150300.7.7.26.2、python-urlgrabber-3.10.2.1py2_3-150300.33.2、spacecmd-4.2.20-150300.4.30.2、spacewalk-backend-4.2.25-150300.4.32.4、spacewallk-client-tools-4.2.21-150300.427.3、spacewalk-java-4.2.43-150300.3.48.2、spacewalk-utils-4.2.8-150300.3.21.2、spacewall-web-4.2.30-150300.3.30.3、susemannager-4.2.38-150300.44.3、susemanager-doc-index-4.2-150300.12.36.3、susenager-docs_en-4.2-1500300.12.36.2、suseemanager-schema-4.25-15300.3.30.3，以及susemanager sls 4.2.28之前版本。SUSE Linux Enterprise Module for SUSE Manager Server 4.3 spacewalk java 4.3.39之前版本。
solution:Upgrade suse manager_server to a higher version than 4.2.10,4.3.2,and avoid the version [4.2,4.2.10),[4.3,4.3.2); Upgrade uyuni-project uyuni to a higher version than 2022.10,and avoid the version (,2022.10)