Authentication bypass in sibling check

published 2018-10-04 8y ago modified 2026-06-17 4mo ago also EUVD-2018-4442

cvss: 7.3; version 3.0, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 1.5%; EPSS 1.5% chance of exploitation in 30 days, percentile 74%
public exploits: 0; none known

A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.

Patch / fix

fixed in 1 distros 1

SUSE Linux SMT 3.0.37

smt SLES 12 SP3, SLES 12 SP2-BCL, SLE Module for Public Cloud 12 +7 more 3.0.38-52.26.1
smt SLES 12 SP3, SLES 12 SP2-BCL, SLE Module for Public Cloud 12 +7 more 3.0.37-52.23.6
smt Subscription Management Tool 11 SP3 2.0.34-50.8.1
perl-File-Touch SLE Module for Public Cloud 12 0.11-3.2.2
yast2-smt SLES for SAP 12 SP1, SLES 12 SP1-LTSS 3.0.14-10.6.2

suse advisories SUSE-SU-2018:3467-2 SUSE-SU-2018:3467-1 SUSE-SU-2018:2898-2 SUSE-SU-2018:2899-1 SUSE-SU-2018:2898-1

Is CVE-2018-12472 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

1.53% chance of exploitation in the next 30 days, higher than 74% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
CNA	3.0	7.3	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
NVD	3.0	9.1	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
NVD	2.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:N

Affected products

SUSE Linux SMT

Classification

Weakness

CWE-287 Improper Authentication

References

bugzilla.suse.com /show_bug.cgi?id=1104076

Sources

CVE List CVE-2018-12472
NVD CVE-2018-12472

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.