CVE-2023-32189: Insecure handling SSH key in SUSE Manager when bootstrapping new clients
Published Oct 16, 2024
·Updated
Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys
Event History
Oct 16, 2024
CVE Published
via MITRE·01:48 PM
Data Sourced
via MITRE·01:48 PM
DescriptionSeverity
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
A local attacker with low-level privileges can potentially access SSH keys used when bootstrapping new clients. Exploitation also requires user interaction.
2
What security impact could result?
An attacker may gain access to SSH keys used for client bootstrapping, which could expose the confidentiality of those credentials. The provided vector does not indicate a direct integrity or availability impact.