CVE-2018-12472 Authentication bypass in sibling check

High 7.3 Published 4 Oct 2018 Updated 16 Sep 2024

Remote attackers can spoof sibling servers by exploiting improper authentication in the HOST header of SUSE SMT.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2018-12472?

CVE-2018-12472 is a high-severity authentication bypass vulnerability in SUSE Linux SMT, published on 4 Oct 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.

Weakness: CWE-287

Which versions are affected by CVE-2018-12472?

It affects 1 product.

Linux distribution packages (10)

`smt` SUSE:Enterprise Storage 4	All versions	`3.0.38-52.26.1`
`smt` SUSE:Linux Enterprise Module for Public Cloud 12	All versions	`3.0.38-52.26.1`
`smt` SUSE:Linux Enterprise Server 12 SP1-LTSS	All versions	`3.0.38-52.26.1`
`smt` SUSE:Linux Enterprise Server 12 SP2-BCL	All versions	`3.0.38-52.26.1`
`smt` SUSE:Linux Enterprise Server 12 SP2-LTSS	All versions	`3.0.38-52.26.1`
`smt` SUSE:Linux Enterprise Server 12 SP3	All versions	`3.0.38-52.26.1`
`smt` SUSE:Linux Enterprise Server for SAP Applications 12 SP1	All versions	`3.0.38-52.26.1`
`smt` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	All versions	`3.0.38-52.26.1`
`smt` SUSE:Linux Enterprise Server for SAP Applications 12 SP3	All versions	`3.0.38-52.26.1`
`smt` SUSE:OpenStack Cloud 7	All versions	`3.0.38-52.26.1`

Products include Suse Subscription Management Tool.

How do I fix CVE-2018-12472?

Apply the vendor's patch.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2018-12472 being exploited?

There is no known exploitation of CVE-2018-12472 in the wild and no public exploit code.

Sources

Also known as GHSA-52vw-gr9g-vp37, SUSE-SU-2018:3467-1, SUSE-SU-2018:3467-2.