CVE-2018-0489 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-0489 Interim 1 36 2025-11-05T03:42:19Z current 2021-05-30T14:06:34Z 2025-11-05T03:42:19Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-0489 Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this issue exists because of an incomplete fix for CVE-2018-0486. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2018-March/003822.html E-Mail link for SUSE-SU-2018:0720-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 openSUSE Tumbleweed libxmltooling-devel libxmltooling-devel-1.5.6-3.6.1 libxmltooling-devel-1.6.4-1.26 libxmltooling-devel-1.6.4-3.3.2 libxmltooling-devel-3.1.0-1.26 libxmltooling-devel-3.1.0-150600.10.3 libxmltooling-devel-3.2.0-1.2 libxmltooling-lite10-3.2.0-1.2 libxmltooling-lite11-3.3.0-160000.2.2 libxmltooling-lite9-3.1.0-1.26 libxmltooling-lite9-3.1.0-150600.10.3 libxmltooling10-3.2.0-1.2 libxmltooling11-3.3.0-160000.2.2 libxmltooling6-1.5.6-3.6.1 libxmltooling6-1.5.6-3.9.1 libxmltooling7 libxmltooling7-1.6.4-1.26 libxmltooling7-1.6.4-3.3.2 libxmltooling9-3.1.0-1.26 libxmltooling9-3.1.0-150600.10.3 xmltooling xmltooling-schemas xmltooling-schemas-1.5.6-3.6.1 xmltooling-schemas-1.5.6-3.9.1 xmltooling-schemas-1.6.4-1.26 xmltooling-schemas-1.6.4-3.3.2 xmltooling-schemas-3.1.0-1.26 xmltooling-schemas-3.1.0-150600.10.3 xmltooling-schemas-3.2.0-1.2 xmltooling-schemas-3.3.0-160000.2.2 libxmltooling6-1.5.6-3.9.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 xmltooling-schemas-1.5.6-3.9.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libxmltooling-devel-1.6.4-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 libxmltooling7-1.6.4-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 xmltooling-schemas-1.6.4-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 libxmltooling-devel-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libxmltooling7-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 xmltooling-schemas-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 libxmltooling-devel-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libxmltooling7-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 xmltooling-schemas-1.6.4-3.3.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libxmltooling-devel-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libxmltooling-lite9-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libxmltooling9-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 xmltooling-schemas-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libxmltooling-devel-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libxmltooling-lite9-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libxmltooling9-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 xmltooling-schemas-3.1.0-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libxmltooling-devel-3.1.0-150600.10.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 libxmltooling-lite9-3.1.0-150600.10.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 libxmltooling9-3.1.0-150600.10.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 xmltooling-schemas-3.1.0-150600.10.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 libxmltooling6-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 xmltooling-schemas-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP2 libxmltooling6-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 xmltooling-schemas-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP3 libxmltooling6-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP4 xmltooling-schemas-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Server 12 SP4 libxmltooling6-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP5 xmltooling-schemas-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP5 libxmltooling-lite11-3.3.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libxmltooling11-3.3.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 xmltooling-schemas-3.3.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libxmltooling6-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 xmltooling-schemas-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libxmltooling6-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xmltooling-schemas-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libxmltooling6-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xmltooling-schemas-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libxmltooling6-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 xmltooling-schemas-1.5.6-3.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libxmltooling-devel-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libxmltooling-devel-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libxmltooling-devel-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libxmltooling-devel-1.5.6-3.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libxmltooling-devel-3.2.0-1.2 as a component of openSUSE Tumbleweed libxmltooling-lite10-3.2.0-1.2 as a component of openSUSE Tumbleweed libxmltooling10-3.2.0-1.2 as a component of openSUSE Tumbleweed xmltooling-schemas-3.2.0-1.2 as a component of openSUSE Tumbleweed libxmltooling-devel as a component of SUSE CaaS Platform 4.0 libxmltooling7 as a component of SUSE CaaS Platform 4.0 xmltooling-schemas as a component of SUSE CaaS Platform 4.0 xmltooling as a component of SUSE CaaS Platform 4.0 xmltooling as a component of SUSE Enterprise Storage 6 libxmltooling-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libxmltooling7 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS xmltooling-schemas as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS xmltooling as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libxmltooling-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libxmltooling7 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS xmltooling-schemas as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS xmltooling as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libxmltooling-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libxmltooling7 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 xmltooling-schemas as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 xmltooling as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libxmltooling-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libxmltooling7 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS xmltooling-schemas as a component of SUSE Linux Enterprise Server 15 SP1-LTSS xmltooling as a component of SUSE Linux Enterprise Server 15 SP1-LTSS xmltooling as a component of SUSE Linux Enterprise Server 15-ESPOS libxmltooling-devel as a component of SUSE Linux Enterprise Server 15-LTSS libxmltooling7 as a component of SUSE Linux Enterprise Server 15-LTSS xmltooling-schemas as a component of SUSE Linux Enterprise Server 15-LTSS xmltooling as a component of SUSE Linux Enterprise Server 15-LTSS xmltooling as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 libxmltooling-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 libxmltooling7 as a component of SUSE Linux Enterprise Server for SAP Applications 15 xmltooling-schemas as a component of SUSE Linux Enterprise Server for SAP Applications 15 xmltooling as a component of SUSE Linux Enterprise Server for SAP Applications 15 libxmltooling-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libxmltooling7 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 xmltooling-schemas as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 xmltooling as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 xmltooling as a component of SUSE Manager Proxy 4.0 xmltooling as a component of SUSE Manager Retail Branch Server 4.0 xmltooling as a component of SUSE Manager Server 4.0 Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this issue exists because of an incomplete fix for CVE-2018-0486. CVE-2018-0489 SUSE Linux Enterprise High Performance Computing 12 SP5:libxmltooling6-1.5.6-3.9.1 SUSE Linux Enterprise High Performance Computing 12 SP5:xmltooling-schemas-1.5.6-3.9.1 SUSE Linux Enterprise Module for Server Applications 15:libxmltooling-devel-1.6.4-1.26 SUSE Linux Enterprise Module for Server Applications 15:libxmltooling7-1.6.4-1.26 SUSE Linux Enterprise Module for Server Applications 15:xmltooling-schemas-1.6.4-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP1:libxmltooling-devel-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:libxmltooling7-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15 SP1:xmltooling-schemas-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15 SP2:libxmltooling-devel-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15 SP2:libxmltooling7-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15 SP2:xmltooling-schemas-1.6.4-3.3.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:libxmltooling-devel-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP3:libxmltooling-lite9-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP3:libxmltooling9-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP3:xmltooling-schemas-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP4:libxmltooling-devel-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP4:libxmltooling-lite9-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP4:libxmltooling9-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP4:xmltooling-schemas-3.1.0-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP7:libxmltooling-devel-3.1.0-150600.10.3 SUSE Linux Enterprise Module for Server Applications 15 SP7:libxmltooling-lite9-3.1.0-150600.10.3 SUSE Linux Enterprise Module for Server Applications 15 SP7:libxmltooling9-3.1.0-150600.10.3 SUSE Linux Enterprise Module for Server Applications 15 SP7:xmltooling-schemas-3.1.0-150600.10.3 SUSE Linux Enterprise Server 12 SP2:libxmltooling6-1.5.6-3.6.1 SUSE Linux Enterprise Server 12 SP2:xmltooling-schemas-1.5.6-3.6.1 SUSE Linux Enterprise Server 12 SP3:libxmltooling6-1.5.6-3.6.1 SUSE Linux Enterprise Server 12 SP3:xmltooling-schemas-1.5.6-3.6.1 SUSE Linux Enterprise Server 12 SP4:libxmltooling6-1.5.6-3.6.1 SUSE Linux Enterprise Server 12 SP4:xmltooling-schemas-1.5.6-3.6.1 SUSE Linux Enterprise Server 12 SP5:libxmltooling6-1.5.6-3.9.1 SUSE Linux Enterprise Server 12 SP5:xmltooling-schemas-1.5.6-3.9.1 SUSE Linux Enterprise Server 16.0:libxmltooling-lite11-3.3.0-160000.2.2 SUSE Linux Enterprise Server 16.0:libxmltooling11-3.3.0-160000.2.2 SUSE Linux Enterprise Server 16.0:xmltooling-schemas-3.3.0-160000.2.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libxmltooling6-1.5.6-3.6.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:xmltooling-schemas-1.5.6-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libxmltooling6-1.5.6-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xmltooling-schemas-1.5.6-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libxmltooling6-1.5.6-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xmltooling-schemas-1.5.6-3.6.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxmltooling6-1.5.6-3.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:xmltooling-schemas-1.5.6-3.9.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libxmltooling-devel-1.5.6-3.6.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libxmltooling-devel-1.5.6-3.6.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libxmltooling-devel-1.5.6-3.6.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libxmltooling-devel-1.5.6-3.6.1 openSUSE Tumbleweed:libxmltooling-devel-3.2.0-1.2 openSUSE Tumbleweed:libxmltooling-lite10-3.2.0-1.2 openSUSE Tumbleweed:libxmltooling10-3.2.0-1.2 openSUSE Tumbleweed:xmltooling-schemas-3.2.0-1.2 SUSE CaaS Platform 4.0:libxmltooling-devel SUSE CaaS Platform 4.0:libxmltooling7 SUSE CaaS Platform 4.0:xmltooling SUSE CaaS Platform 4.0:xmltooling-schemas SUSE Enterprise Storage 6:xmltooling SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libxmltooling-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libxmltooling7 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xmltooling SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xmltooling-schemas SUSE Linux Enterprise High Performance Computing 15-LTSS:libxmltooling-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:libxmltooling7 SUSE Linux Enterprise High Performance Computing 15-LTSS:xmltooling SUSE Linux Enterprise High Performance Computing 15-LTSS:xmltooling-schemas SUSE Linux Enterprise Module for Server Applications 15 SP2:libxmltooling-devel SUSE Linux Enterprise Module for Server Applications 15 SP2:libxmltooling7 SUSE Linux Enterprise Module for Server Applications 15 SP2:xmltooling SUSE Linux Enterprise Module for Server Applications 15 SP2:xmltooling-schemas SUSE Linux Enterprise Server 15 SP1-LTSS:libxmltooling-devel SUSE Linux Enterprise Server 15 SP1-LTSS:libxmltooling7 SUSE Linux Enterprise Server 15 SP1-LTSS:xmltooling SUSE Linux Enterprise Server 15 SP1-LTSS:xmltooling-schemas SUSE Linux Enterprise Server 15-ESPOS:xmltooling SUSE Linux Enterprise Server 15-LTSS:libxmltooling-devel SUSE Linux Enterprise Server 15-LTSS:libxmltooling7 SUSE Linux Enterprise Server 15-LTSS:xmltooling SUSE Linux Enterprise Server 15-LTSS:xmltooling-schemas SUSE Linux Enterprise Server Business Critical Linux 15 SP1:xmltooling SUSE Linux Enterprise Server for SAP Applications 15 SP1:libxmltooling-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:libxmltooling7 SUSE Linux Enterprise Server for SAP Applications 15 SP1:xmltooling SUSE Linux Enterprise Server for SAP Applications 15 SP1:xmltooling-schemas SUSE Linux Enterprise Server for SAP Applications 15:libxmltooling-devel SUSE Linux Enterprise Server for SAP Applications 15:libxmltooling7 SUSE Linux Enterprise Server for SAP Applications 15:xmltooling SUSE Linux Enterprise Server for SAP Applications 15:xmltooling-schemas SUSE Manager Proxy 4.0:xmltooling SUSE Manager Retail Branch Server 4.0:xmltooling SUSE Manager Server 4.0:xmltooling moderate 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N