CVE-2019-18906 cryptctl: client side password hashing is equivalent to clear text password storage
Attackers with access to hashed passwords can authenticate directly without cracking them due to weak client-side hashing in cryptctl.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-18906?
CVE-2019-18906 is a critical vulnerability in SUSE Linux Enterprise Server for SAP 12-SP5, published on 30 Jun 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE Manager Server 4.0 cryptctl versions prior to 2.4.
Weakness: CWE-287
Which versions are affected by CVE-2019-18906?
It affects 1 product.
Linux distribution packages (20)
cryptctl SUSE:Enterprise Storage 6 | All versions | 2.4-4.5.1 |
cryptctl SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS | All versions | 2.4-4.5.1 |
cryptctl SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | All versions | 2.4-4.5.1 |
cryptctl SUSE:Linux Enterprise Module for Basesystem 15 SP2 | All versions | 2.4-4.5.1 |
cryptctl SUSE:Linux Enterprise Module for Basesystem 15 SP3 | All versions | 2.4-4.5.1 |
cryptctl SUSE:Linux Enterprise Module for SAP Applications 15 | All versions | 2.4-4.5.1 |
cryptctl SUSE:Linux Enterprise Module for SAP Applications 15 SP1 | All versions | 2.4-4.5.1 |
cryptctl SUSE:Linux Enterprise Server 12 SP5 | All versions | 2.4-2.10.1 |
cryptctl SUSE:Linux Enterprise Server 15 SP1-BCL | All versions | 2.4-4.5.1 |
cryptctl SUSE:Linux Enterprise Server 15 SP1-LTSS | All versions | 2.4-4.5.1 |
cryptctl SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 2.4-2.10.1 |
cryptctl SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 2.4-2.10.1 |
cryptctl SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 2.4-2.10.1 |
cryptctl SUSE:Linux Enterprise Server for SAP Applications 15 SP1 | All versions | 2.4-4.5.1 |
cryptctl SUSE:Manager Proxy 4.0 | All versions | 2.4-4.5.1 |
cryptctl SUSE:Manager Retail Branch Server 4.0 | All versions | 2.4-4.5.1 |
cryptctl SUSE:Manager Server 4.0 | All versions | 2.4-4.5.1 |
cryptctl openSUSE:Leap 15.2 | All versions | 2.4-lp152.5.3.1 |
cryptctl openSUSE:Leap 15.3 | All versions | 2.4-4.5.1 |
cryptctl openSUSE:Tumbleweed | All versions | 2.4-1.1 |
Products include Opensuse Cryptctl.
How do I fix CVE-2019-18906?
Upgrade to a fixed version.
Is CVE-2019-18906 being exploited?
There is no known exploitation of CVE-2019-18906 in the wild and no public exploit code.
Other vulnerabilities in SUSE Linux Enterprise Server for SAP 12-SP5
Sources
Also known as GHSA-x9cr-r4j4-8ph8, SUSE-SU-2021:2136-1, SUSE-SU-2021:2137-1, openSUSE-SU-2021:0907-1, openSUSE-SU-2021:2136-1, openSUSE-SU-2024:12078-1.