CVE-2019-18905 : What You Need to Know

A vulnerability known as "Insufficient Verification of Data Authenticity" has been identified in the autoyast2 component of SUSE Linux Enterprise Server 12 and SUSE Linux Enterprise Server 15. This CVE was published on April 3, 2020.

Understanding CVE-2019-18905

This CVE affects SUSE Linux Enterprise Server 12 and 15 due to deprecated functionality in autoyast2 that automatically imports GPG keys without proper verification.

What is CVE-2019-18905?

The vulnerability allows remote attackers to execute a Man-in-the-Middle (MITM) attack by exploiting deprecated and unused features of autoyast.

The Impact of CVE-2019-18905

The CVSS score for this vulnerability is 4.8, indicating a medium severity issue with high attack complexity and low availability impact.

Technical Details of CVE-2019-18905

This section provides detailed technical information about the vulnerability.

Vulnerability Description

The vulnerability arises from insufficient verification of data authenticity in the autoyast2 component of SUSE Linux Enterprise Server 12 and 15.

Affected Systems and Versions

SUSE Linux Enterprise Server 12 with autoyast2 version 4.1.9-3.9.1 or earlier
SUSE Linux Enterprise Server 15 with autoyast2 version 4.0.70-3.20.1 or earlier

Exploitation Mechanism

Attackers can exploit deprecated and unused functionality of autoyast to create images and conduct MITM attacks.

Mitigation and Prevention

It is crucial to take immediate steps to address and prevent the exploitation of this vulnerability.

Immediate Steps to Take

Update autoyast2 to the latest version that includes a fix for the vulnerability
Monitor network traffic for any suspicious activity
Implement strong encryption protocols to secure data transmission

Long-Term Security Practices

Regularly update and patch all software components to prevent vulnerabilities
Conduct security audits and assessments to identify and mitigate potential risks
Educate users and administrators about secure practices to prevent MITM attacks

Patching and Updates

Apply patches provided by SUSE for autoyast2 to address the vulnerability
Stay informed about security advisories and updates from SUSE to protect systems