cve-2023-40577
HIGH CVSS 7.5 csaf_suse
Description
SUSE CVE-2023-40577
Timeline
- Published
- 2024-01-17 02:46 UTC
- Last Modified
- 2026-06-06
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "SUSE CVE-2023-40577",
"title": "Title"
},
{
"category": "description",
"text": "Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint could be able to execute arbitrary JavaScript code on the users of Prometheus Alertmanager. This issue has been fixed in Alertmanager version 0.2.51.",
"title": "Description of the CVE"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "CVE-2023-40577",
"url": "https://www.suse.com/security/cve/CVE-2023-40577"
},
{
"category": "external",
"summary": "SUSE Security Ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "external",
"summary": "SUSE Bug 1218838 for CVE-2023-40577",
"url": "https://bugzilla.suse.com/1218838"
},
{
"category": "external",
"summary": "Advisory link for SUSE-SU-2024:0191-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017744.html"
},
{
"category": "external",
"summary": "Advisory link for SUSE-SU-2024:0486-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017932.html"
},
{
"category": "external",
"summary": "Advisory link for SUSE-SU-2024:0512-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017925.html"
}
],
"title": "SUSE CVE CVE-2023-40577",
"tracking": {
"current_release_date": "2026-06-06T04:49:50Z",
"generator": {
"date": "2024-01-17T02:46:21Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf-vex.pl",
"version": "1"
}
},
"id": "CVE-2023-40577",
"initial_release_date": "2024-01-17T02:46:21Z",
"revision_history": [
{
"date": "2024-01-17T02:46:21Z",
"number": "2",
"summary": "Current version"
},
{
"date": "2024-01-20T03:12:47Z",
"number": "3",
"summary": "Current version"
},
{
"date": "2024-01-24T02:51:26Z",
"number": "4",
"summary": "Current version"
},
{
"date": "2024-02-17T03:23:23Z",
"number": "5",
"summary": "Current version"
},
{
"date": "2024-11-16T00:47:51Z",
"number": "6",
"summary": "Current version"
},
{
"date": "2025-01-01T01:56:04Z",
"number": "7",
"summary": "Current version"
},
{
"date": "2025-02-14T06:15:31Z",
"number": "8",
"summary": "Current version"
},
{
"date": "2025-02-16T06:08:33Z",
"number": "9",
"summary": "Current version"
},
{
"date": "2025-03-15T06:10:54Z",
"number": "10",
"summary": "Current version"
},
{
"date": "2025-04-02T09:14:38Z",
"number": "11",
"summary": "Current version"
},
{
"date": "2025-04-09T01:54:36Z",
"number": "12",
"summary": "Current version"
},
{
"date": "2025-04-25T02:28:23Z",
"number": "13",
"summary": "Current version"
},
{
"date": "2025-06-04T03:44:16Z",
"number": "14",
"summary": "Current version"
},
{
"date": "2025-06-26T01:55:41Z",
"number": "15",
"summary": "Current version"
},
{
"date": "2025-09-29T00:12:51Z",
"number": "16",
"summary": "Current version"
},
{
"date": "2026-06-06T04:49:50Z",
"number": "17",
"summary": "unknown changes"
}
],
"status": "interim",
"version": "17"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Client Tools 12",
"product": {
"name": "SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12"
}
},
{
"category": "product_name",
"name": "SUSE Manager Client Tools 12-BETA",
"product": {
"name": "SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA"
}
},
{
"category": "product_name",
"name": "SUSE Manager Client Tools 15",
"product": {
"name": "SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15"
}
},
{
"category": "product_name",
"name": "SUSE Manager Proxy Module 4.2",
"product": {
"name": "SUSE Manager Proxy Module 4.2",
"product_id": "SUSE Manager Proxy Module 4.2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-suse-manager-proxy:4.2"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Proxy Module 4.3",
"product": {
"name": "SUSE Manager Proxy Module 4.3",
"product_id": "SUSE Manager Proxy Module 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-suse-manager-proxy:4.3"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
},
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
},
{
"category": "product_version",
"name": "golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2",
"product": {
"name": "golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2",
"product_id": "golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/golang-github-QubitProducts-exporter_exporter@0.4.0-4.6.2?upstream=golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "golang-github-boynux-squid_exporter-1.6-4.9.2",
"product": {
"name": "golang-github-boynux-squid_exporter-1.6-4.9.2",
"product_id": "golang-github-boynux-squid_exporter-1.6-4.9.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/golang-github-boynux-squid_exporter@1.6-4.9.2?upstream=golang-github-boynux-squid_exporter-1.6-4.9.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2",
"product": {
"name": "golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2",
"product_id": "golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/golang-github-lusitaniae-apache_exporter@1.0.0-1.21.2?upstream=golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4",
"product": {
"name": "golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4",
"product_id": "golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4",
"product_identification_helper": {
"purl": "pkg:rpm/suse/golang-github-lusitaniae-apache_exporter@1.0.0-4.12.4?upstream=golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-alertmanager",
"product": {
"name": "golang-github-prometheus-alertmanager",
"product_id": "golang-github-prometheus-alertmanager",
"product_identification_helper": {
"cpe": "cpe:2.3:a:prometheus:alertmanager:*:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/golang-github-prometheus-alertmanager@?upstream=golang-github-prometheus-alertmanager.src.rpm"
}
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-alertmanager-0.26.0-1.24.2",
"product": {
"name": "golang-github-prometheus-alertmanager-0.26.0-1.24.2",
"product_id": "golang-github-prometheus-alertmanager-0.26.0-1.24.2",
"product_identification_helper": {
"cpe": "cpe:2.3:a:prometheus:alertmanager:0.26.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/golang-github-prometheus-alertmanager@0.26.0-1.24.2?upstream=golang-github-prometheus-alertmanager-0.26.0-1.24.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"product": {
"name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"product_id": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"product_identification_helper": {
"cpe": "cpe:2.3:a:prometheus:alertmanager:0.26.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/golang-github-prometheus-alertmanager@0.26.0-150100.4.19.1?upstream=golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-alertmanager-0.26.0-4.1",
"product": {
"name": "golang-github-prometheus-alertmanager-0.26.0-4.1",
"product_id": "golang-github-prometheus-alertmanager-0.26.0-4.1",
"product_identification_helper": {
"cpe": "cpe:2.3:a:prometheus:alertmanager:0.26.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/golang-github-prometheus-alertmanager@0.26.0-4.1?upstream=golang-github-prometheus-alertmanager-0.26.0-4.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-alertmanager-0.26.0-4.12.4",
"product": {
"name": "golang-github-prometheus-alertmanager-0.26.0-4.12.4",
"product_id": "golang-github-prometheus-alertmanager-0.26.0-4.12.4",
"product_identification_helper": {
"cpe": "cpe:2.3:a:prometheus:alertmanager:0.26.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/golang-github-prometheus-alertmanager@0.26.0-4.12.4?upstream=golang-github-prometheus-alertmanager-0.26.0-4.12.4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-node_exporter-1.5.0-4.15.4",
"product": {
"name": "golang-github-prometheus-node_exporter-1.5.0-4.15.4",
"product_id": "golang-github-prometheus-node_exporter-1.5.0-4.15.4",
"product_identification_helper": {
"purl": "pkg:rpm/suse/golang-github-prometheus-node_exporter@1.5.0-4.15.4?upstream=golang-github-prometheus-node_exporter-1.5.0-4.15.4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-prometheus-2.45.0-1.50.2",
"product": {
"name": "golang-github-prometheus-prometheus-2.45.0-1.50.2",
"product_id": "golang-github-prometheus-prometheus-2.45.0-1.50.2",
"product_identification_helper": {
"cpe": "cpe:2.3:a:prometheus:prometheus:2.45.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/golang-github-prometheus-prometheus@2.45.0-1.50.2?upstream=golang-github-prometheus-prometheus-2.45.0-1.50.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-prometheus-2.45.0-4.33.3",
"product": {
"name": "golang-github-prometheus-prometheus-2.45.0-4.33.3",
"product_id": "golang-github-prometheus-prometheus-2.45.0-4.33.3",
"product_identification_helper": {
"cpe": "cpe:2.3:a:prometheus:prometheus:2.45.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/golang-github-prometheus-prometheus@2.45.0-4.33.3?upstream=golang-github-prometheus-prometheus-2.45.0-4.33.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-promu-0.14.0-4.12.2",
"product": {
"name": "golang-github-prometheus-promu-0.14.0-4.12.2",
"product_id": "golang-github-prometheus-promu-0.14.0-4.12.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/golang-github-prometheus-promu@0.14.0-4.12.2?upstream=golang-github-prometheus-promu-0.14.0-4.12.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "grafana-9.5.8-1.60.1",
"product": {
"name": "grafana-9.5.8-1.60.1",
"product_id": "grafana-9.5.8-1.60.1",
"product_identification_helper": {
"cpe": "cpe:2.3:a:grafana:grafana:9.5.8:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/grafana@9.5.8-1.60.1?upstream=grafana-9.5.8-1.60.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "grafana-9.5.8-4.21.2",
"product": {
"name": "grafana-9.5.8-4.21.2",
"product_id": "grafana-9.5.8-4.21.2",
"product_identification_helper": {
"cpe": "cpe:2.3:a:grafana:grafana:9.5.8:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/grafana@9.5.8-4.21.2?upstream=grafana-9.5.8-4.21.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2",
"product": {
"name": "kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2",
"product_id": "kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kiwi-desc-saltboot@0.1.1687520761.cefb248-4.15.2?upstream=kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mgr-daemon-4.3.8-1.44.2",
"product": {
"name": "mgr-daemon-4.3.8-1.44.2",
"product_id": "mgr-daemon-4.3.8-1.44.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mgr-daemon@4.3.8-1.44.2?upstream=mgr-daemon-4.3.8-1.44.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mgr-push-5.0.1-4.21.4",
"product": {
"name": "mgr-push-5.0.1-4.21.4",
"product_id": "mgr-push-5.0.1-4.21.4",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mgr-push@5.0.1-4.21.4?upstream=mgr-push-5.0.1-4.21.4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "prometheus-blackbox_exporter-0.24.0-3.6.3",
"product": {
"name": "prometheus-blackbox_exporter-0.24.0-3.6.3",
"product_id": "prometheus-blackbox_exporter-0.24.0-3.6.3",
"product_identification_helper": {
"purl": "pkg:rpm/suse/prometheus-blackbox_exporter@0.24.0-3.6.3?upstream=prometheus-blackbox_exporter-0.24.0-3.6.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "prometheus-postgres_exporter-0.10.1-1.17.2",
"product": {
"name": "prometheus-postgres_exporter-0.10.1-1.17.2",
"product_id": "prometheus-postgres_exporter-0.10.1-1.17.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/prometheus-postgres_exporter@0.10.1-1.17.2?upstream=prometheus-postgres_exporter-0.10.1-1.17.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "prometheus-postgres_exporter-0.10.1-3.6.4",
"product": {
"name": "prometheus-postgres_exporter-0.10.1-3.6.4",
"product_id": "prometheus-postgres_exporter-0.10.1-3.6.4",
"product_identification_helper": {
"purl": "pkg:rpm/suse/prometheus-postgres_exporter@0.10.1-3.6.4?upstream=prometheus-postgres_exporter-0.10.1-3.6.4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python2-hwdata-2.3.5-15.12.2",
"product": {
"name": "python2-hwdata-2.3.5-15.12.2",
"product_id": "python2-hwdata-2.3.5-15.12.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python2-hwdata@2.3.5-15.12.2?upstream=python-hwdata-2.3.5-15.12.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python2-mgr-push-5.0.1-4.21.4",
"product": {
"name": "python2-mgr-push-5.0.1-4.21.4",
"product_id": "python2-mgr-push-5.0.1-4.21.4",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python2-mgr-push@5.0.1-4.21.4?upstream=mgr-push-5.0.1-4.21.4.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python2-rhnlib-5.0.1-24.30.3",
"product": {
"name": "python2-rhnlib-5.0.1-24.30.3",
"product_id": "python2-rhnlib-5.0.1-24.30.3",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python2-rhnlib@5.0.1-24.30.3?upstream=rhnlib-5.0.1-24.30.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python2-spacewalk-check-4.3.18-52.95.2",
"product": {
"name": "python2-spacewalk-check-4.3.18-52.95.2",
"product_id": "python2-spacewalk-check-4.3.18-52.95.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python2-spacewalk-check@4.3.18-52.95.2?upstream=spacewalk-client-tools-4.3.18-52.95.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python2-spacewalk-client-setup-4.3.18-52.95.2",
"product": {
"name": "python2-spacewalk-client-setup-4.3.18-52.95.2",
"product_id": "python2-spacewalk-client-setup-4.3.18-52.95.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python2-spacewalk-client-setup@4.3.18-52.95.2?upstream=spacewalk-client-tools-4.3.18-52.95.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python2-spacewalk-client-tools-4.3.18-52.95.2",
"product": {
"name": "python2-spacewalk-client-tools-4.3.18-52.95.2",
"product_id": "python2-spacewalk-client-tools-4.3.18-52.95.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python2-spacewalk-client-tools@4.3.18-52.95.2?upstream=spacewalk-client-tools-4.3.18-52.95.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python2-uyuni-common-libs-5.0.1-3.33.3",
"product": {
"name": "python2-uyuni-common-libs-5.0.1-3.33.3",
"product_id": "python2-uyuni-common-libs-5.0.1-3.33.3",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python2-uyuni-common-libs@5.0.1-3.33.3?upstream=uyuni-common-libs-5.0.1-3.33.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "spacecmd-4.3.26-38.136.2",
"product": {
"name": "spacecmd-4.3.26-38.136.2",
"product_id": "spacecmd-4.3.26-38.136.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/spacecmd@4.3.26-38.136.2?upstream=spacecmd-4.3.26-38.136.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "spacecmd-5.0.1-41.42.3",
"product": {
"name": "spacecmd-5.0.1-41.42.3",
"product_id": "spacecmd-5.0.1-41.42.3",
"product_identification_helper": {
"purl": "pkg:rpm/suse/spacecmd@5.0.1-41.42.3?upstream=spacecmd-5.0.1-41.42.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "spacewalk-check-4.3.18-52.95.2",
"product": {
"name": "spacewalk-check-4.3.18-52.95.2",
"product_id": "spacewalk-check-4.3.18-52.95.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/spacewalk-check@4.3.18-52.95.2?upstream=spacewalk-client-tools-4.3.18-52.95.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "spacewalk-client-setup-4.3.18-52.95.2",
"product": {
"name": "spacewalk-client-setup-4.3.18-52.95.2",
"product_id": "spacewalk-client-setup-4.3.18-52.95.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/spacewalk-client-setup@4.3.18-52.95.2?upstream=spacewalk-client-tools-4.3.18-52.95.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "spacewalk-client-tools-4.3.18-52.95.2",
"product": {
"name": "spacewalk-client-tools-4.3.18-52.95.2",
"product_id": "spacewalk-client-tools-4.3.18-52.95.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/spacewalk-client-tools@4.3.18-52.95.2?upstream=spacewalk-client-tools-4.3.18-52.95.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "supportutils-plugin-salt-1.2.2-9.9.2",
"product": {
"name": "supportutils-plugin-salt-1.2.2-9.9.2",
"product_id": "supportutils-plugin-salt-1.2.2-9.9.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/supportutils-plugin-salt@1.2.2-9.9.2?upstream=supportutils-plugin-salt-1.2.2-9.9.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "supportutils-plugin-susemanager-client-5.0.1-9.15.2",
"product": {
"name": "supportutils-plugin-susemanager-client-5.0.1-9.15.2",
"product_id": "supportutils-plugin-susemanager-client-5.0.1-9.15.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/supportutils-plugin-susemanager-client@5.0.1-9.15.2?upstream=supportutils-plugin-susemanager-client-5.0.1-9.15.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "system-user-grafana-1.0.0-3.7.2",
"product": {
"name": "system-user-grafana-1.0.0-3.7.2",
"product_id": "system-user-grafana-1.0.0-3.7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/system-user-grafana@1.0.0-3.7.2?upstream=system-user-grafana-1.0.0-3.7.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "system-user-prometheus-1.0.0-3.7.2",
"product": {
"name": "system-user-prometheus-1.0.0-3.7.2",
"product_id": "system-user-prometheus-1.0.0-3.7.2",
"product_identification_helper": {
"purl": "pkg:rpm/suse/system-user-prometheus@1.0.0-3.7.2?upstream=system-user-prometheus-1.0.0-3.7.2.src.rpm"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1"
},
"product_reference": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1"
},
"product_reference": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1"
},
"product_reference": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2"
},
"product_reference": "golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager-0.26.0-1.24.2 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:golang-github-prometheus-alertmanager-0.26.0-1.24.2"
},
"product_reference": "golang-github-prometheus-alertmanager-0.26.0-1.24.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-prometheus-2.45.0-1.50.2 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:golang-github-prometheus-prometheus-2.45.0-1.50.2"
},
"product_reference": "golang-github-prometheus-prometheus-2.45.0-1.50.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-9.5.8-1.60.1 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:grafana-9.5.8-1.60.1"
},
"product_reference": "grafana-9.5.8-1.60.1",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mgr-daemon-4.3.8-1.44.2 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:mgr-daemon-4.3.8-1.44.2"
},
"product_reference": "mgr-daemon-4.3.8-1.44.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "prometheus-postgres_exporter-0.10.1-1.17.2 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:prometheus-postgres_exporter-0.10.1-1.17.2"
},
"product_reference": "prometheus-postgres_exporter-0.10.1-1.17.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-spacewalk-check-4.3.18-52.95.2 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:python2-spacewalk-check-4.3.18-52.95.2"
},
"product_reference": "python2-spacewalk-check-4.3.18-52.95.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-spacewalk-client-setup-4.3.18-52.95.2 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:python2-spacewalk-client-setup-4.3.18-52.95.2"
},
"product_reference": "python2-spacewalk-client-setup-4.3.18-52.95.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-spacewalk-client-tools-4.3.18-52.95.2 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:python2-spacewalk-client-tools-4.3.18-52.95.2"
},
"product_reference": "python2-spacewalk-client-tools-4.3.18-52.95.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacecmd-4.3.26-38.136.2 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:spacecmd-4.3.26-38.136.2"
},
"product_reference": "spacecmd-4.3.26-38.136.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-check-4.3.18-52.95.2 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:spacewalk-check-4.3.18-52.95.2"
},
"product_reference": "spacewalk-check-4.3.18-52.95.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-client-setup-4.3.18-52.95.2 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:spacewalk-client-setup-4.3.18-52.95.2"
},
"product_reference": "spacewalk-client-setup-4.3.18-52.95.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-client-tools-4.3.18-52.95.2 as component of SUSE Manager Client Tools 12",
"product_id": "SUSE Manager Client Tools 12:spacewalk-client-tools-4.3.18-52.95.2"
},
"product_reference": "spacewalk-client-tools-4.3.18-52.95.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2"
},
"product_reference": "golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-boynux-squid_exporter-1.6-4.9.2 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:golang-github-boynux-squid_exporter-1.6-4.9.2"
},
"product_reference": "golang-github-boynux-squid_exporter-1.6-4.9.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4"
},
"product_reference": "golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager-0.26.0-4.12.4 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-alertmanager-0.26.0-4.12.4"
},
"product_reference": "golang-github-prometheus-alertmanager-0.26.0-4.12.4",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-node_exporter-1.5.0-4.15.4 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-node_exporter-1.5.0-4.15.4"
},
"product_reference": "golang-github-prometheus-node_exporter-1.5.0-4.15.4",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-prometheus-2.45.0-4.33.3 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-prometheus-2.45.0-4.33.3"
},
"product_reference": "golang-github-prometheus-prometheus-2.45.0-4.33.3",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-promu-0.14.0-4.12.2 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-promu-0.14.0-4.12.2"
},
"product_reference": "golang-github-prometheus-promu-0.14.0-4.12.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-9.5.8-4.21.2 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:grafana-9.5.8-4.21.2"
},
"product_reference": "grafana-9.5.8-4.21.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2"
},
"product_reference": "kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mgr-push-5.0.1-4.21.4 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:mgr-push-5.0.1-4.21.4"
},
"product_reference": "mgr-push-5.0.1-4.21.4",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "prometheus-blackbox_exporter-0.24.0-3.6.3 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:prometheus-blackbox_exporter-0.24.0-3.6.3"
},
"product_reference": "prometheus-blackbox_exporter-0.24.0-3.6.3",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "prometheus-postgres_exporter-0.10.1-3.6.4 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:prometheus-postgres_exporter-0.10.1-3.6.4"
},
"product_reference": "prometheus-postgres_exporter-0.10.1-3.6.4",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-hwdata-2.3.5-15.12.2 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:python2-hwdata-2.3.5-15.12.2"
},
"product_reference": "python2-hwdata-2.3.5-15.12.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-mgr-push-5.0.1-4.21.4 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:python2-mgr-push-5.0.1-4.21.4"
},
"product_reference": "python2-mgr-push-5.0.1-4.21.4",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-rhnlib-5.0.1-24.30.3 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:python2-rhnlib-5.0.1-24.30.3"
},
"product_reference": "python2-rhnlib-5.0.1-24.30.3",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-uyuni-common-libs-5.0.1-3.33.3 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:python2-uyuni-common-libs-5.0.1-3.33.3"
},
"product_reference": "python2-uyuni-common-libs-5.0.1-3.33.3",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacecmd-5.0.1-41.42.3 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:spacecmd-5.0.1-41.42.3"
},
"product_reference": "spacecmd-5.0.1-41.42.3",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "supportutils-plugin-salt-1.2.2-9.9.2 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:supportutils-plugin-salt-1.2.2-9.9.2"
},
"product_reference": "supportutils-plugin-salt-1.2.2-9.9.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "supportutils-plugin-susemanager-client-5.0.1-9.15.2 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:supportutils-plugin-susemanager-client-5.0.1-9.15.2"
},
"product_reference": "supportutils-plugin-susemanager-client-5.0.1-9.15.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "system-user-grafana-1.0.0-3.7.2 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:system-user-grafana-1.0.0-3.7.2"
},
"product_reference": "system-user-grafana-1.0.0-3.7.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "system-user-prometheus-1.0.0-3.7.2 as component of SUSE Manager Client Tools 12-BETA",
"product_id": "SUSE Manager Client Tools 12-BETA:system-user-prometheus-1.0.0-3.7.2"
},
"product_reference": "system-user-prometheus-1.0.0-3.7.2",
"relates_to_product_reference": "SUSE Manager Client Tools 12-BETA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1 as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1"
},
"product_reference": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1 as component of SUSE Manager Proxy Module 4.3",
"product_id": "SUSE Manager Proxy Module 4.3:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1"
},
"product_reference": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"relates_to_product_reference": "SUSE Manager Proxy Module 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1"
},
"product_reference": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager-0.26.0-4.1 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:golang-github-prometheus-alertmanager-0.26.0-4.1"
},
"product_reference": "golang-github-prometheus-alertmanager-0.26.0-4.1",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager as component of SUSE Manager Proxy Module 4.2",
"product_id": "SUSE Manager Proxy Module 4.2:golang-github-prometheus-alertmanager"
},
"product_reference": "golang-github-prometheus-alertmanager",
"relates_to_product_reference": "SUSE Manager Proxy Module 4.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-40577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-40577"
}
],
"notes": [
{
"category": "general",
"text": "Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint could be able to execute arbitrary JavaScript code on the users of Prometheus Alertmanager. This issue has been fixed in Alertmanager version 0.2.51.",
"title": "CVE description"
}
],
"product_status": {
"known_not_affected": [
"SUSE Manager Proxy Module 4.2:golang-github-prometheus-alertmanager"
],
"recommended": [
"SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Manager Client Tools 12-BETA:golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2",
"SUSE Manager Client Tools 12-BETA:golang-github-boynux-squid_exporter-1.6-4.9.2",
"SUSE Manager Client Tools 12-BETA:golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4",
"SUSE Manager Client Tools 12-BETA:golang-github-prometheus-alertmanager-0.26.0-4.12.4",
"SUSE Manager Client Tools 12-BETA:golang-github-prometheus-node_exporter-1.5.0-4.15.4",
"SUSE Manager Client Tools 12-BETA:golang-github-prometheus-prometheus-2.45.0-4.33.3",
"SUSE Manager Client Tools 12-BETA:golang-github-prometheus-promu-0.14.0-4.12.2",
"SUSE Manager Client Tools 12-BETA:grafana-9.5.8-4.21.2",
"SUSE Manager Client Tools 12-BETA:kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2",
"SUSE Manager Client Tools 12-BETA:mgr-push-5.0.1-4.21.4",
"SUSE Manager Client Tools 12-BETA:prometheus-blackbox_exporter-0.24.0-3.6.3",
"SUSE Manager Client Tools 12-BETA:prometheus-postgres_exporter-0.10.1-3.6.4",
"SUSE Manager Client Tools 12-BETA:python2-hwdata-2.3.5-15.12.2",
"SUSE Manager Client Tools 12-BETA:python2-mgr-push-5.0.1-4.21.4",
"SUSE Manager Client Tools 12-BETA:python2-rhnlib-5.0.1-24.30.3",
"SUSE Manager Client Tools 12-BETA:python2-uyuni-common-libs-5.0.1-3.33.3",
"SUSE Manager Client Tools 12-BETA:spacecmd-5.0.1-41.42.3",
"SUSE Manager Client Tools 12-BETA:supportutils-plugin-salt-1.2.2-9.9.2",
"SUSE Manager Client Tools 12-BETA:supportutils-plugin-susemanager-client-5.0.1-9.15.2",
"SUSE Manager Client Tools 12-BETA:system-user-grafana-1.0.0-3.7.2",
"SUSE Manager Client Tools 12-BETA:system-user-prometheus-1.0.0-3.7.2",
"SUSE Manager Client Tools 12:golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2",
"SUSE Manager Client Tools 12:golang-github-prometheus-alertmanager-0.26.0-1.24.2",
"SUSE Manager Client Tools 12:golang-github-prometheus-prometheus-2.45.0-1.50.2",
"SUSE Manager Client Tools 12:grafana-9.5.8-1.60.1",
"SUSE Manager Client Tools 12:mgr-daemon-4.3.8-1.44.2",
"SUSE Manager Client Tools 12:prometheus-postgres_exporter-0.10.1-1.17.2",
"SUSE Manager Client Tools 12:python2-spacewalk-check-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:python2-spacewalk-client-setup-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:python2-spacewalk-client-tools-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:spacecmd-4.3.26-38.136.2",
"SUSE Manager Client Tools 12:spacewalk-check-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:spacewalk-client-setup-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:spacewalk-client-tools-4.3.18-52.95.2",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Manager Proxy Module 4.3:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"openSUSE Leap 15.5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"openSUSE Tumbleweed:golang-github-prometheus-alertmanager-0.26.0-4.1"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-40577",
"url": "https://www.suse.com/security/cve/CVE-2023-40577"
},
{
"category": "external",
"summary": "SUSE Security Ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "external",
"summary": "SUSE Bug 1218838 for CVE-2023-40577",
"url": "https://bugzilla.suse.com/1218838"
},
{
"category": "external",
"summary": "Advisory link for SUSE-SU-2024:0191-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017744.html"
},
{
"category": "external",
"summary": "Advisory link for SUSE-SU-2024:0486-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017932.html"
},
{
"category": "external",
"summary": "Advisory link for SUSE-SU-2024:0512-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017925.html"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Manager Client Tools 12-BETA:golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2",
"SUSE Manager Client Tools 12-BETA:golang-github-boynux-squid_exporter-1.6-4.9.2",
"SUSE Manager Client Tools 12-BETA:golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4",
"SUSE Manager Client Tools 12-BETA:golang-github-prometheus-alertmanager-0.26.0-4.12.4",
"SUSE Manager Client Tools 12-BETA:golang-github-prometheus-node_exporter-1.5.0-4.15.4",
"SUSE Manager Client Tools 12-BETA:golang-github-prometheus-prometheus-2.45.0-4.33.3",
"SUSE Manager Client Tools 12-BETA:golang-github-prometheus-promu-0.14.0-4.12.2",
"SUSE Manager Client Tools 12-BETA:grafana-9.5.8-4.21.2",
"SUSE Manager Client Tools 12-BETA:kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2",
"SUSE Manager Client Tools 12-BETA:mgr-push-5.0.1-4.21.4",
"SUSE Manager Client Tools 12-BETA:prometheus-blackbox_exporter-0.24.0-3.6.3",
"SUSE Manager Client Tools 12-BETA:prometheus-postgres_exporter-0.10.1-3.6.4",
"SUSE Manager Client Tools 12-BETA:python2-hwdata-2.3.5-15.12.2",
"SUSE Manager Client Tools 12-BETA:python2-mgr-push-5.0.1-4.21.4",
"SUSE Manager Client Tools 12-BETA:python2-rhnlib-5.0.1-24.30.3",
"SUSE Manager Client Tools 12-BETA:python2-uyuni-common-libs-5.0.1-3.33.3",
"SUSE Manager Client Tools 12-BETA:spacecmd-5.0.1-41.42.3",
"SUSE Manager Client Tools 12-BETA:supportutils-plugin-salt-1.2.2-9.9.2",
"SUSE Manager Client Tools 12-BETA:supportutils-plugin-susemanager-client-5.0.1-9.15.2",
"SUSE Manager Client Tools 12-BETA:system-user-grafana-1.0.0-3.7.2",
"SUSE Manager Client Tools 12-BETA:system-user-prometheus-1.0.0-3.7.2",
"SUSE Manager Client Tools 12:golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2",
"SUSE Manager Client Tools 12:golang-github-prometheus-alertmanager-0.26.0-1.24.2",
"SUSE Manager Client Tools 12:golang-github-prometheus-prometheus-2.45.0-1.50.2",
"SUSE Manager Client Tools 12:grafana-9.5.8-1.60.1",
"SUSE Manager Client Tools 12:mgr-daemon-4.3.8-1.44.2",
"SUSE Manager Client Tools 12:prometheus-postgres_exporter-0.10.1-1.17.2",
"SUSE Manager Client Tools 12:python2-spacewalk-check-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:python2-spacewalk-client-setup-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:python2-spacewalk-client-tools-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:spacecmd-4.3.26-38.136.2",
"SUSE Manager Client Tools 12:spacewalk-check-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:spacewalk-client-setup-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:spacewalk-client-tools-4.3.18-52.95.2",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Manager Proxy Module 4.3:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"openSUSE Leap 15.5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"openSUSE Tumbleweed:golang-github-prometheus-alertmanager-0.26.0-4.1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Linux Enterprise Module for Package Hub 15 SP7:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Manager Client Tools 12-BETA:golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2",
"SUSE Manager Client Tools 12-BETA:golang-github-boynux-squid_exporter-1.6-4.9.2",
"SUSE Manager Client Tools 12-BETA:golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4",
"SUSE Manager Client Tools 12-BETA:golang-github-prometheus-alertmanager-0.26.0-4.12.4",
"SUSE Manager Client Tools 12-BETA:golang-github-prometheus-node_exporter-1.5.0-4.15.4",
"SUSE Manager Client Tools 12-BETA:golang-github-prometheus-prometheus-2.45.0-4.33.3",
"SUSE Manager Client Tools 12-BETA:golang-github-prometheus-promu-0.14.0-4.12.2",
"SUSE Manager Client Tools 12-BETA:grafana-9.5.8-4.21.2",
"SUSE Manager Client Tools 12-BETA:kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2",
"SUSE Manager Client Tools 12-BETA:mgr-push-5.0.1-4.21.4",
"SUSE Manager Client Tools 12-BETA:prometheus-blackbox_exporter-0.24.0-3.6.3",
"SUSE Manager Client Tools 12-BETA:prometheus-postgres_exporter-0.10.1-3.6.4",
"SUSE Manager Client Tools 12-BETA:python2-hwdata-2.3.5-15.12.2",
"SUSE Manager Client Tools 12-BETA:python2-mgr-push-5.0.1-4.21.4",
"SUSE Manager Client Tools 12-BETA:python2-rhnlib-5.0.1-24.30.3",
"SUSE Manager Client Tools 12-BETA:python2-uyuni-common-libs-5.0.1-3.33.3",
"SUSE Manager Client Tools 12-BETA:spacecmd-5.0.1-41.42.3",
"SUSE Manager Client Tools 12-BETA:supportutils-plugin-salt-1.2.2-9.9.2",
"SUSE Manager Client Tools 12-BETA:supportutils-plugin-susemanager-client-5.0.1-9.15.2",
"SUSE Manager Client Tools 12-BETA:system-user-grafana-1.0.0-3.7.2",
"SUSE Manager Client Tools 12-BETA:system-user-prometheus-1.0.0-3.7.2",
"SUSE Manager Client Tools 12:golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2",
"SUSE Manager Client Tools 12:golang-github-prometheus-alertmanager-0.26.0-1.24.2",
"SUSE Manager Client Tools 12:golang-github-prometheus-prometheus-2.45.0-1.50.2",
"SUSE Manager Client Tools 12:grafana-9.5.8-1.60.1",
"SUSE Manager Client Tools 12:mgr-daemon-4.3.8-1.44.2",
"SUSE Manager Client Tools 12:prometheus-postgres_exporter-0.10.1-1.17.2",
"SUSE Manager Client Tools 12:python2-spacewalk-check-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:python2-spacewalk-client-setup-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:python2-spacewalk-client-tools-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:spacecmd-4.3.26-38.136.2",
"SUSE Manager Client Tools 12:spacewalk-check-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:spacewalk-client-setup-4.3.18-52.95.2",
"SUSE Manager Client Tools 12:spacewalk-client-tools-4.3.18-52.95.2",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"SUSE Manager Proxy Module 4.3:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"openSUSE Leap 15.5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1",
"openSUSE Tumbleweed:golang-github-prometheus-alertmanager-0.26.0-4.1"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-08-25T02:00:45Z",
"details": "important"
}
],
"title": "CVE-2023-40577"
}
]
}
Enrichment data
Aggregated bundle (all enrichments)