{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"moderate"},"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"Security update for SUSE Manager Proxy 3.0","title":"Title of the patch"},{"category":"description","text":"\nThe following security issue in spacewalk-backend has been fixed:\n\n- Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel.\n  (bsc#1026633, CVE-2017-7470)\n\nAdditionally, the following non-security issues have been fixed:\n\nrhnlib:\n\n- Support all TLS versions in rpclib. (bsc#1025312)\n\nspacewalk-backend:\n\n- Do not fail with traceback when media.1 does not exist. (bsc#1032256)\n- Create scap files dir beforehand. (bsc#1029755)\n- Fix error if SPACEWALK_DEBUG_NO_REPORTS env variable is not present.\n- Don't skip 'rhnErrataPackage' cleanup during an errata update. (bsc#1023233)\n- Add support for running spacewalk-debug without creating reports. (bsc#1024714)\n- Set scap store dir mod to 775 and group owner to susemanager.\n- Incomplete_package_import: do import rhnPackageFile as it breaks some package installations.\n- Added traceback printing to the exception block.\n- Change postgresql starting commands.\n\nspacewalk-certs-tools:\n\n- Always restart the minion regardless of its current state. (bsc#1034956)\n- Correctly honor disabling of SSL in bootstrap script. (bsc#1033383)\n- Add curl dependency and move mgr-proxy-ssh* to spacewalk-proxy package.\n- Exit for non-traditional bootstrap scripts. (bsc#1020904)\n- Rename mgr-ssh-proxy-force-cmd -> mgr-proxy-ssh-force-cmd.\n- Add mgr-proxy-ssh-force-cmd, mgr-proxy-ssh-push-init to rpm.\n- Add option to configure only sshd.\n- Restrictive ssh options for user mgrsshtunnel.\n\nspacewalk-client-tools:\n\n- Fix reboot message to use correct product name. (bsc#1031667)\n\nspacewalk-proxy:\n\n- Add curl dependency and move mgr-proxy-ssh* to spacewalk-proxy package.\n- Lower the use-file-instead-of-memory treshold. (bsc#1030342)\n\nspacewalk-proxy-installer:\n\n- Do not start firewall on proxy during configuration if not already active. (bsc#1031338)\n- Salt minions get repodata via a different URL; reflect by additional squid rule. (bsc#1027873)\n- Only warn if parent ssh-push pub key could not be retrieved.\n- Generate and auth ssh push keys for user mgrsshtunnel.\n- Authorize parent salt-ssh key on proxy.\n- Generate proxy ssh-push key and authorize the previous proxy in the chain.\n- Generate own ssh-push key for proxy and authorize parent.\n\nspacewalk-web:\n\n- Remote Commands: Allow Web Socket to be opened on non-standard port.\n- Improve remote cmd ui err handling.\n- Show message when waiting for ssh minions times out.\n- Fix remote cmd ui js err and timed out message.\n- Remote cmd UI changes for salt-ssh minions.\n- Fix broken help link for taskstatus. (bsc#1017422)\n- Add js utility function to create Date objects in different timezones.\n- Show proxy path in bootstrap UI.\n- Clear proxy selection when clicking clear fields button.\n- Check if proxy hostname is FQDN not name in UI.\n- Show warn in bootstrap UI if proxy hostname is not a FQDN.\n\nsusemanager-sls:\n\n- Add certificate state for CAASP.\n- Add certificate state for SLES for SAP. (bsc#1031659)\n- Pre-create empty top.sls with no-op. (bsc#1017754)\n- Add xccdf result xslt.\n- Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758)\n- Set scap store dir mod to 775 and group owner to susemanager.\n- Store uploaded scap files.\n- Set minion own key owner to bootstrap ssh_push_sudo_user.\n- Runner to generate ssh key and execute cmd via proxies.\n- Change ssh bootstrap state to generate and auth keys for salt-ssh push with tunnel.\n- Authorize parent salt-ssh key on proxy.\n\nHow to apply this update:\n1. Log in as root user to the SUSE Manager proxy.\n2. Stop the proxy service:\nspacewalk-proxy stop\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\nspacewalk-proxy start\n","title":"Description of the patch"},{"category":"details","text":"SUSE-SUSE-Manager-Proxy-3.0-2017-827","title":"Patchnames"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"SUSE ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"self","summary":"URL of this CSAF notice","url":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1346-1.json"},{"category":"self","summary":"URL for SUSE-SU-2017:1346-1","url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171346-1/"},{"category":"self","summary":"E-Mail link for SUSE-SU-2017:1346-1","url":"https://lists.suse.com/pipermail/sle-security-updates/2017-May/002897.html"},{"category":"self","summary":"SUSE Bug 1017422","url":"https://bugzilla.suse.com/1017422"},{"category":"self","summary":"SUSE Bug 1017754","url":"https://bugzilla.suse.com/1017754"},{"category":"self","summary":"SUSE Bug 1020904","url":"https://bugzilla.suse.com/1020904"},{"category":"self","summary":"SUSE Bug 1023233","url":"https://bugzilla.suse.com/1023233"},{"category":"self","summary":"SUSE Bug 1024714","url":"https://bugzilla.suse.com/1024714"},{"category":"self","summary":"SUSE Bug 1025312","url":"https://bugzilla.suse.com/1025312"},{"category":"self","summary":"SUSE Bug 1025758","url":"https://bugzilla.suse.com/1025758"},{"category":"self","summary":"SUSE Bug 1026633","url":"https://bugzilla.suse.com/1026633"},{"category":"self","summary":"SUSE Bug 1027873","url":"https://bugzilla.suse.com/1027873"},{"category":"self","summary":"SUSE Bug 1029755","url":"https://bugzilla.suse.com/1029755"},{"category":"self","summary":"SUSE Bug 1030342","url":"https://bugzilla.suse.com/1030342"},{"category":"self","summary":"SUSE Bug 1031338","url":"https://bugzilla.suse.com/1031338"},{"category":"self","summary":"SUSE Bug 1031659","url":"https://bugzilla.suse.com/1031659"},{"category":"self","summary":"SUSE Bug 1031667","url":"https://bugzilla.suse.com/1031667"},{"category":"self","summary":"SUSE Bug 1032256","url":"https://bugzilla.suse.com/1032256"},{"category":"self","summary":"SUSE Bug 1033383","url":"https://bugzilla.suse.com/1033383"},{"category":"self","summary":"SUSE Bug 1034956","url":"https://bugzilla.suse.com/1034956"},{"category":"self","summary":"SUSE CVE CVE-2017-7470 page","url":"https://www.suse.com/security/cve/CVE-2017-7470/"}],"title":"Security update for SUSE Manager Proxy 3.0","tracking":{"current_release_date":"2017-05-18T22:20:37Z","generator":{"date":"2017-05-18T22:20:37Z","engine":{"name":"cve-database.git:bin/generate-csaf.pl","version":"1"}},"id":"SUSE-SU-2017:1346-1","initial_release_date":"2017-05-18T22:20:37Z","revision_history":[{"date":"2017-05-18T22:20:37Z","number":"1","summary":"Current version"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version","name":"rhnlib-2.5.84.4-6.1.noarch","product":{"name":"rhnlib-2.5.84.4-6.1.noarch","product_id":"rhnlib-2.5.84.4-6.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-libs-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-libs-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-libs-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-base-minimal-2.5.7.15-21.1.noarch","product":{"name":"spacewalk-base-minimal-2.5.7.15-21.1.noarch","product_id":"spacewalk-base-minimal-2.5.7.15-21.1.noarch"}},{"category":"product_version","name":"spacewalk-base-minimal-config-2.5.7.15-21.1.noarch","product":{"name":"spacewalk-base-minimal-config-2.5.7.15-21.1.noarch","product_id":"spacewalk-base-minimal-config-2.5.7.15-21.1.noarch"}},{"category":"product_version","name":"spacewalk-certs-tools-2.5.1.8-17.1.noarch","product":{"name":"spacewalk-certs-tools-2.5.1.8-17.1.noarch","product_id":"spacewalk-certs-tools-2.5.1.8-17.1.noarch"}},{"category":"product_version","name":"spacewalk-check-2.5.13.8-17.2.noarch","product":{"name":"spacewalk-check-2.5.13.8-17.2.noarch","product_id":"spacewalk-check-2.5.13.8-17.2.noarch"}},{"category":"product_version","name":"spacewalk-client-setup-2.5.13.8-17.2.noarch","product":{"name":"spacewalk-client-setup-2.5.13.8-17.2.noarch","product_id":"spacewalk-client-setup-2.5.13.8-17.2.noarch"}},{"category":"product_version","name":"spacewalk-client-tools-2.5.13.8-17.2.noarch","product":{"name":"spacewalk-client-tools-2.5.13.8-17.2.noarch","product_id":"spacewalk-client-tools-2.5.13.8-17.2.noarch"}},{"category":"product_version","name":"spacewalk-proxy-broker-2.5.1.7-15.1.noarch","product":{"name":"spacewalk-proxy-broker-2.5.1.7-15.1.noarch","product_id":"spacewalk-proxy-broker-2.5.1.7-15.1.noarch"}},{"category":"product_version","name":"spacewalk-proxy-common-2.5.1.7-15.1.noarch","product":{"name":"spacewalk-proxy-common-2.5.1.7-15.1.noarch","product_id":"spacewalk-proxy-common-2.5.1.7-15.1.noarch"}},{"category":"product_version","name":"spacewalk-proxy-installer-2.5.2.5-6.1.noarch","product":{"name":"spacewalk-proxy-installer-2.5.2.5-6.1.noarch","product_id":"spacewalk-proxy-installer-2.5.2.5-6.1.noarch"}},{"category":"product_version","name":"spacewalk-proxy-management-2.5.1.7-15.1.noarch","product":{"name":"spacewalk-proxy-management-2.5.1.7-15.1.noarch","product_id":"spacewalk-proxy-management-2.5.1.7-15.1.noarch"}},{"category":"product_version","name":"spacewalk-proxy-package-manager-2.5.1.7-15.1.noarch","product":{"name":"spacewalk-proxy-package-manager-2.5.1.7-15.1.noarch","product_id":"spacewalk-proxy-package-manager-2.5.1.7-15.1.noarch"}},{"category":"product_version","name":"spacewalk-proxy-redirect-2.5.1.7-15.1.noarch","product":{"name":"spacewalk-proxy-redirect-2.5.1.7-15.1.noarch","product_id":"spacewalk-proxy-redirect-2.5.1.7-15.1.noarch"}},{"category":"product_version","name":"spacewalk-proxy-salt-2.5.1.7-15.1.noarch","product":{"name":"spacewalk-proxy-salt-2.5.1.7-15.1.noarch","product_id":"spacewalk-proxy-salt-2.5.1.7-15.1.noarch"}},{"category":"product_version","name":"susemanager-sls-0.1.20-23.1.noarch","product":{"name":"susemanager-sls-0.1.20-23.1.noarch","product_id":"susemanager-sls-0.1.20-23.1.noarch"}}],"category":"architecture","name":"noarch"},{"branches":[{"category":"product_name","name":"SUSE Manager Proxy 3.0","product":{"name":"SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0","product_identification_helper":{"cpe":"cpe:/o:suse:suse-manager-proxy:3.0"}}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"rhnlib-2.5.84.4-6.1.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:rhnlib-2.5.84.4-6.1.noarch"},"product_reference":"rhnlib-2.5.84.4-6.1.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-2.5.24.9-22.1.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-backend-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-libs-2.5.24.9-22.1.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-backend-libs-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-libs-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-base-minimal-2.5.7.15-21.1.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-base-minimal-2.5.7.15-21.1.noarch"},"product_reference":"spacewalk-base-minimal-2.5.7.15-21.1.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-base-minimal-config-2.5.7.15-21.1.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-base-minimal-config-2.5.7.15-21.1.noarch"},"product_reference":"spacewalk-base-minimal-config-2.5.7.15-21.1.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-certs-tools-2.5.1.8-17.1.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-certs-tools-2.5.1.8-17.1.noarch"},"product_reference":"spacewalk-certs-tools-2.5.1.8-17.1.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-check-2.5.13.8-17.2.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-check-2.5.13.8-17.2.noarch"},"product_reference":"spacewalk-check-2.5.13.8-17.2.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-client-setup-2.5.13.8-17.2.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-client-setup-2.5.13.8-17.2.noarch"},"product_reference":"spacewalk-client-setup-2.5.13.8-17.2.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-client-tools-2.5.13.8-17.2.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-client-tools-2.5.13.8-17.2.noarch"},"product_reference":"spacewalk-client-tools-2.5.13.8-17.2.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-proxy-broker-2.5.1.7-15.1.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-proxy-broker-2.5.1.7-15.1.noarch"},"product_reference":"spacewalk-proxy-broker-2.5.1.7-15.1.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-proxy-common-2.5.1.7-15.1.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-proxy-common-2.5.1.7-15.1.noarch"},"product_reference":"spacewalk-proxy-common-2.5.1.7-15.1.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-proxy-installer-2.5.2.5-6.1.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-proxy-installer-2.5.2.5-6.1.noarch"},"product_reference":"spacewalk-proxy-installer-2.5.2.5-6.1.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-proxy-management-2.5.1.7-15.1.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-proxy-management-2.5.1.7-15.1.noarch"},"product_reference":"spacewalk-proxy-management-2.5.1.7-15.1.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-proxy-package-manager-2.5.1.7-15.1.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-proxy-package-manager-2.5.1.7-15.1.noarch"},"product_reference":"spacewalk-proxy-package-manager-2.5.1.7-15.1.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-proxy-redirect-2.5.1.7-15.1.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-proxy-redirect-2.5.1.7-15.1.noarch"},"product_reference":"spacewalk-proxy-redirect-2.5.1.7-15.1.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-proxy-salt-2.5.1.7-15.1.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:spacewalk-proxy-salt-2.5.1.7-15.1.noarch"},"product_reference":"spacewalk-proxy-salt-2.5.1.7-15.1.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"},{"category":"default_component_of","full_product_name":{"name":"susemanager-sls-0.1.20-23.1.noarch as component of SUSE Manager Proxy 3.0","product_id":"SUSE Manager Proxy 3.0:susemanager-sls-0.1.20-23.1.noarch"},"product_reference":"susemanager-sls-0.1.20-23.1.noarch","relates_to_product_reference":"SUSE Manager Proxy 3.0"}]},"vulnerabilities":[{"cve":"CVE-2017-7470","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2017-7470"}],"notes":[{"category":"general","text":"It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.","title":"CVE description"}],"product_status":{"recommended":["SUSE Manager Proxy 3.0:rhnlib-2.5.84.4-6.1.noarch","SUSE Manager Proxy 3.0:spacewalk-backend-2.5.24.9-22.1.noarch","SUSE Manager Proxy 3.0:spacewalk-backend-libs-2.5.24.9-22.1.noarch","SUSE Manager Proxy 3.0:spacewalk-base-minimal-2.5.7.15-21.1.noarch","SUSE Manager Proxy 3.0:spacewalk-base-minimal-config-2.5.7.15-21.1.noarch","SUSE Manager Proxy 3.0:spacewalk-certs-tools-2.5.1.8-17.1.noarch","SUSE Manager Proxy 3.0:spacewalk-check-2.5.13.8-17.2.noarch","SUSE Manager Proxy 3.0:spacewalk-client-setup-2.5.13.8-17.2.noarch","SUSE Manager Proxy 3.0:spacewalk-client-tools-2.5.13.8-17.2.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-broker-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-common-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-installer-2.5.2.5-6.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-management-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-package-manager-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-redirect-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-salt-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:susemanager-sls-0.1.20-23.1.noarch"]},"references":[{"category":"external","summary":"CVE-2017-7470","url":"https://www.suse.com/security/cve/CVE-2017-7470"},{"category":"external","summary":"SUSE Bug 1026633 for CVE-2017-7470","url":"https://bugzilla.suse.com/1026633"},{"category":"external","summary":"SUSE Bug 1057882 for CVE-2017-7470","url":"https://bugzilla.suse.com/1057882"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Manager Proxy 3.0:rhnlib-2.5.84.4-6.1.noarch","SUSE Manager Proxy 3.0:spacewalk-backend-2.5.24.9-22.1.noarch","SUSE Manager Proxy 3.0:spacewalk-backend-libs-2.5.24.9-22.1.noarch","SUSE Manager Proxy 3.0:spacewalk-base-minimal-2.5.7.15-21.1.noarch","SUSE Manager Proxy 3.0:spacewalk-base-minimal-config-2.5.7.15-21.1.noarch","SUSE Manager Proxy 3.0:spacewalk-certs-tools-2.5.1.8-17.1.noarch","SUSE Manager Proxy 3.0:spacewalk-check-2.5.13.8-17.2.noarch","SUSE Manager Proxy 3.0:spacewalk-client-setup-2.5.13.8-17.2.noarch","SUSE Manager Proxy 3.0:spacewalk-client-tools-2.5.13.8-17.2.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-broker-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-common-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-installer-2.5.2.5-6.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-management-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-package-manager-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-redirect-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-salt-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:susemanager-sls-0.1.20-23.1.noarch"]}],"scores":[{"cvss_v3":{"baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","version":"3.0"},"products":["SUSE Manager Proxy 3.0:rhnlib-2.5.84.4-6.1.noarch","SUSE Manager Proxy 3.0:spacewalk-backend-2.5.24.9-22.1.noarch","SUSE Manager Proxy 3.0:spacewalk-backend-libs-2.5.24.9-22.1.noarch","SUSE Manager Proxy 3.0:spacewalk-base-minimal-2.5.7.15-21.1.noarch","SUSE Manager Proxy 3.0:spacewalk-base-minimal-config-2.5.7.15-21.1.noarch","SUSE Manager Proxy 3.0:spacewalk-certs-tools-2.5.1.8-17.1.noarch","SUSE Manager Proxy 3.0:spacewalk-check-2.5.13.8-17.2.noarch","SUSE Manager Proxy 3.0:spacewalk-client-setup-2.5.13.8-17.2.noarch","SUSE Manager Proxy 3.0:spacewalk-client-tools-2.5.13.8-17.2.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-broker-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-common-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-installer-2.5.2.5-6.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-management-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-package-manager-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-redirect-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:spacewalk-proxy-salt-2.5.1.7-15.1.noarch","SUSE Manager Proxy 3.0:susemanager-sls-0.1.20-23.1.noarch"]}],"threats":[{"category":"impact","date":"2017-05-18T22:20:37Z","details":"important"}],"title":"CVE-2017-7470"}]}