[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCm3k_K1TtZWc7mnFFcyg3fpBU1X8yXPDU7EW0wN7XXE":3,"g5a-risk:CVE-2019-18906":133},{"success":4,"data":5,"meta":131},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":27,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":61,"references":62,"referencesCount":69,"weaknesses":70,"weaknessesCount":69,"isActivelyExploited":79,"cisaInfo":27,"otxData":27,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":129,"notableEvents":130},"CVE-2019-18906","What is CVE-2019-18906?","A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE Manager Server 4.0 cryptctl versions prior to 2.4.","A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to t...","2021-06-30T09:15:07.847","2023-04-14T18:48:49.62",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":34,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"meissner@suse.de","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":25,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.01111,[43,43,43,43,43,43,43],"Critical",[47,52,57],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"opensuse","cryptctl","*","cpe:2.3:a:opensuse:cryptctl:*:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"suse","linux_enterprise_server","12","cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:*:sap:*:*",{"vendor":53,"product":58,"version":59,"criteria":60,"vulnerable":4},"manager_server","4.0","cpe:2.3:a:suse:manager_server:4.0:*:*:*:*:*:*:*",3,[63],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1186226","Suse",[67,68],"Issue Tracking","Vendor Advisory",1,[71],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2019-18906? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-18906, a critical severity cyber security vulnerability from 2021. A Improper Authentication vulnerability in cryptctl of ...","CVE-2019-18906, CVE-2019-18906 vulnerability, CVE-2019-18906 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, opensuse security, suse security, cryptctl vulnerability, linux_enterprise_server vulnerability, manager_server vulnerability","\u002Fwhat-is\u002Fcve-2019-18906",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-18906","Cybersecurity","CVE-2019-18906, CVE-2019-18906 vulnerability, CVE-2019-18906 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107,120],{"Operator":108,"Negate":27,"Nodes":109},"AND",[110,116],{"Operator":111,"Negate":27,"CPEMatch":112},"OR",[113],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":114,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":115,"VersionEndIncluding":27},"8B013A25-0852-4A65-969F-636C86EEB8EA","2.4",{"Operator":111,"Negate":27,"CPEMatch":117},[118],{"Vulnerable":27,"Criteria":56,"MatchCriteriaID":119,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"471E110C-10CC-4C36-BDE1-BBB27EF5C6EA",{"Operator":108,"Negate":27,"Nodes":121},[122,125],{"Operator":111,"Negate":27,"CPEMatch":123},[124],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":114,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":115,"VersionEndIncluding":27},{"Operator":111,"Negate":27,"CPEMatch":126},[127],{"Vulnerable":27,"Criteria":60,"MatchCriteriaID":128,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"51136B38-5715-49B3-BD8D-91F90632247D",[],[],{"lastModified":11,"cacheTime":132,"version":37},1792255002832,{"score":134,"band":135,"action":136,"scoredAt":137},54,"Medium","Plan remediation","2026-10-16T06:51:28.382064+00:00"]