CVE-2025-54882 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-54882 Interim 1 3 2026-03-05T00:30:22Z current 2025-08-13T23:14:55Z 2026-03-05T00:30:22Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-54882 Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials are stored as world readable. This is fixed in versions 0.9.22 and 1.2.0. To work around this issue, remove all read access to Himmelblau caches for all users except for owners. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Module for Basesystem 15 SP7 openSUSE Tumbleweed himmelblau himmelblau-0.9.22+git.0.d41f700-160000.1.2 himmelblau-1.2.0+git.0.6befefc-1.1 himmelblau-qr-greeter-0.9.22+git.0.d41f700-160000.1.2 himmelblau-qr-greeter-1.2.0+git.0.6befefc-1.1 himmelblau-sshd-config himmelblau-sshd-config-0.9.22+git.0.d41f700-160000.1.2 himmelblau-sshd-config-1.2.0+git.0.6befefc-1.1 himmelblau-sso-0.9.22+git.0.d41f700-160000.1.2 himmelblau-sso-1.2.0+git.0.6befefc-1.1 libnss_himmelblau2 libnss_himmelblau2-0.9.22+git.0.d41f700-160000.1.2 libnss_himmelblau2-1.2.0+git.0.6befefc-1.1 pam-himmelblau pam-himmelblau-0.9.22+git.0.d41f700-160000.1.2 pam-himmelblau-1.2.0+git.0.6befefc-1.1 himmelblau-0.9.22+git.0.d41f700-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 himmelblau-qr-greeter-0.9.22+git.0.d41f700-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 himmelblau-sshd-config-0.9.22+git.0.d41f700-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 himmelblau-sso-0.9.22+git.0.d41f700-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 libnss_himmelblau2-0.9.22+git.0.d41f700-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 pam-himmelblau-0.9.22+git.0.d41f700-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 himmelblau-1.2.0+git.0.6befefc-1.1 as a component of openSUSE Tumbleweed himmelblau-qr-greeter-1.2.0+git.0.6befefc-1.1 as a component of openSUSE Tumbleweed himmelblau-sshd-config-1.2.0+git.0.6befefc-1.1 as a component of openSUSE Tumbleweed himmelblau-sso-1.2.0+git.0.6befefc-1.1 as a component of openSUSE Tumbleweed libnss_himmelblau2-1.2.0+git.0.6befefc-1.1 as a component of openSUSE Tumbleweed pam-himmelblau-1.2.0+git.0.6befefc-1.1 as a component of openSUSE Tumbleweed himmelblau as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 himmelblau-sshd-config as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libnss_himmelblau2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 pam-himmelblau as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials are stored as world readable. This is fixed in versions 0.9.22 and 1.2.0. To work around this issue, remove all read access to Himmelblau caches for all users except for owners. CVE-2025-54882 SUSE Linux Enterprise Server 16.0:himmelblau-0.9.22+git.0.d41f700-160000.1.2 SUSE Linux Enterprise Server 16.0:himmelblau-qr-greeter-0.9.22+git.0.d41f700-160000.1.2 SUSE Linux Enterprise Server 16.0:himmelblau-sshd-config-0.9.22+git.0.d41f700-160000.1.2 SUSE Linux Enterprise Server 16.0:himmelblau-sso-0.9.22+git.0.d41f700-160000.1.2 SUSE Linux Enterprise Server 16.0:libnss_himmelblau2-0.9.22+git.0.d41f700-160000.1.2 SUSE Linux Enterprise Server 16.0:pam-himmelblau-0.9.22+git.0.d41f700-160000.1.2 openSUSE Tumbleweed:himmelblau-1.2.0+git.0.6befefc-1.1 openSUSE Tumbleweed:himmelblau-qr-greeter-1.2.0+git.0.6befefc-1.1 openSUSE Tumbleweed:himmelblau-sshd-config-1.2.0+git.0.6befefc-1.1 openSUSE Tumbleweed:himmelblau-sso-1.2.0+git.0.6befefc-1.1 openSUSE Tumbleweed:libnss_himmelblau2-1.2.0+git.0.6befefc-1.1 openSUSE Tumbleweed:pam-himmelblau-1.2.0+git.0.6befefc-1.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau SUSE Linux Enterprise Module for Basesystem 15 SP7:himmelblau-sshd-config SUSE Linux Enterprise Module for Basesystem 15 SP7:libnss_himmelblau2 SUSE Linux Enterprise Module for Basesystem 15 SP7:pam-himmelblau important 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N