CVE-2024-2044 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-2044 Interim 1 22 2025-08-06T01:05:41Z current 2024-03-09T00:09:55Z 2025-08-06T01:05:41Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-2044 pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users' sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on POSIX/Linux, an authenticated attacker can upload pickle objects, deserialize them, and gain code execution. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2024-April/018379.html E-Mail link for SUSE-SU-2024:1340-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.5 openSUSE Leap 15.6 openSUSE Tumbleweed pgadmin4 pgadmin4-4.1-150100.3.9.2 pgadmin4-4.30-150300.3.12.1 pgadmin4-8.5-1.1 pgadmin4-cloud pgadmin4-cloud-8.5-1.1 pgadmin4-desktop pgadmin4-desktop-8.5-1.1 pgadmin4-doc pgadmin4-doc-4.1-150100.3.9.2 pgadmin4-doc-4.30-150300.3.12.1 pgadmin4-doc-8.5-1.1 pgadmin4-web pgadmin4-web-4.1-150100.3.9.2 pgadmin4-web-4.30-150300.3.12.1 pgadmin4-web-uwsgi pgadmin4-web-uwsgi-4.30-150300.3.12.1 pgadmin4-web-uwsgi-8.5-1.1 system-user-pgadmin system-user-pgadmin-8.5-1.1 system-user-pgadmin-8.5-150600.1.6 pgadmin4-4.30-150300.3.12.1 as a component of SUSE Enterprise Storage 7.1 pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Enterprise Storage 7.1 pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Enterprise Storage 7.1 pgadmin4-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pgadmin4-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS pgadmin4-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS pgadmin4-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 system-user-pgadmin-8.5-150600.1.6 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 pgadmin4-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 pgadmin4-4.1-150100.3.9.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA pgadmin4-doc-4.1-150100.3.9.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA pgadmin4-web-4.1-150100.3.9.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA pgadmin4-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA pgadmin4-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 pgadmin4-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 pgadmin4-4.30-150300.3.12.1 as a component of SUSE Manager Proxy 4.3 pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Manager Proxy 4.3 pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Manager Proxy 4.3 pgadmin4-4.30-150300.3.12.1 as a component of SUSE Manager Retail Branch Server 4.3 pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Manager Retail Branch Server 4.3 pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Manager Retail Branch Server 4.3 pgadmin4-4.30-150300.3.12.1 as a component of SUSE Manager Server 4.3 pgadmin4-doc-4.30-150300.3.12.1 as a component of SUSE Manager Server 4.3 pgadmin4-web-4.30-150300.3.12.1 as a component of SUSE Manager Server 4.3 pgadmin4-4.30-150300.3.12.1 as a component of openSUSE Leap 15.5 pgadmin4-doc-4.30-150300.3.12.1 as a component of openSUSE Leap 15.5 pgadmin4-web-4.30-150300.3.12.1 as a component of openSUSE Leap 15.5 pgadmin4-web-uwsgi-4.30-150300.3.12.1 as a component of openSUSE Leap 15.5 pgadmin4-8.5-1.1 as a component of openSUSE Tumbleweed pgadmin4-cloud-8.5-1.1 as a component of openSUSE Tumbleweed pgadmin4-desktop-8.5-1.1 as a component of openSUSE Tumbleweed pgadmin4-doc-8.5-1.1 as a component of openSUSE Tumbleweed pgadmin4-web-uwsgi-8.5-1.1 as a component of openSUSE Tumbleweed system-user-pgadmin-8.5-1.1 as a component of openSUSE Tumbleweed pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS pgadmin4 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4-doc as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4-web as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 system-user-pgadmin as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 pgadmin4-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 pgadmin4-web as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 pgadmin4 as a component of openSUSE Leap 15.6 pgadmin4-cloud as a component of openSUSE Leap 15.6 pgadmin4-desktop as a component of openSUSE Leap 15.6 pgadmin4-doc as a component of openSUSE Leap 15.6 pgadmin4-web-uwsgi as a component of openSUSE Leap 15.6 system-user-pgadmin as a component of openSUSE Leap 15.6 pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users' sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execution. If the server is running on POSIX/Linux, an authenticated attacker can upload pickle objects, deserialize them, and gain code execution. CVE-2024-2044 SUSE Enterprise Storage 7.1:pgadmin4-4.30-150300.3.12.1 SUSE Enterprise Storage 7.1:pgadmin4-doc-4.30-150300.3.12.1 SUSE Enterprise Storage 7.1:pgadmin4-web-4.30-150300.3.12.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pgadmin4-4.30-150300.3.12.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pgadmin4-doc-4.30-150300.3.12.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pgadmin4-web-4.30-150300.3.12.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:pgadmin4-4.30-150300.3.12.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:pgadmin4-doc-4.30-150300.3.12.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:pgadmin4-web-4.30-150300.3.12.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:pgadmin4-4.30-150300.3.12.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:pgadmin4-doc-4.30-150300.3.12.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:pgadmin4-web-4.30-150300.3.12.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:pgadmin4-web-uwsgi-4.30-150300.3.12.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:pgadmin4-web-uwsgi-4.30-150300.3.12.1 SUSE Linux Enterprise Module for Python 3 15 SP6:pgadmin4-4.30-150300.3.12.1 SUSE Linux Enterprise Module for Python 3 15 SP6:pgadmin4-doc-4.30-150300.3.12.1 SUSE Linux Enterprise Module for Python 3 15 SP6:pgadmin4-web-4.30-150300.3.12.1 SUSE Linux Enterprise Module for Python 3 15 SP6:system-user-pgadmin-8.5-150600.1.6 SUSE Linux Enterprise Module for Python 3 15 SP7:pgadmin4-4.30-150300.3.12.1 SUSE Linux Enterprise Module for Python 3 15 SP7:pgadmin4-doc-4.30-150300.3.12.1 SUSE Linux Enterprise Module for Python 3 15 SP7:pgadmin4-web-4.30-150300.3.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:pgadmin4-4.30-150300.3.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:pgadmin4-doc-4.30-150300.3.12.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:pgadmin4-web-4.30-150300.3.12.1 SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA:pgadmin4-4.1-150100.3.9.2 SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA:pgadmin4-doc-4.1-150100.3.9.2 SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA:pgadmin4-web-4.1-150100.3.9.2 SUSE Linux Enterprise Server 15 SP3-LTSS:pgadmin4-4.30-150300.3.12.1 SUSE Linux Enterprise Server 15 SP3-LTSS:pgadmin4-doc-4.30-150300.3.12.1 SUSE Linux Enterprise Server 15 SP3-LTSS:pgadmin4-web-4.30-150300.3.12.1 SUSE Linux Enterprise Server 15 SP4-LTSS:pgadmin4-4.30-150300.3.12.1 SUSE Linux Enterprise Server 15 SP4-LTSS:pgadmin4-doc-4.30-150300.3.12.1 SUSE Linux Enterprise Server 15 SP4-LTSS:pgadmin4-web-4.30-150300.3.12.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:pgadmin4-4.30-150300.3.12.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:pgadmin4-doc-4.30-150300.3.12.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:pgadmin4-web-4.30-150300.3.12.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:pgadmin4-4.30-150300.3.12.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:pgadmin4-doc-4.30-150300.3.12.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:pgadmin4-web-4.30-150300.3.12.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:pgadmin4-4.30-150300.3.12.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:pgadmin4-doc-4.30-150300.3.12.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:pgadmin4-web-4.30-150300.3.12.1 SUSE Manager Proxy 4.3:pgadmin4-4.30-150300.3.12.1 SUSE Manager Proxy 4.3:pgadmin4-doc-4.30-150300.3.12.1 SUSE Manager Proxy 4.3:pgadmin4-web-4.30-150300.3.12.1 SUSE Manager Retail Branch Server 4.3:pgadmin4-4.30-150300.3.12.1 SUSE Manager Retail Branch Server 4.3:pgadmin4-doc-4.30-150300.3.12.1 SUSE Manager Retail Branch Server 4.3:pgadmin4-web-4.30-150300.3.12.1 SUSE Manager Server 4.3:pgadmin4-4.30-150300.3.12.1 SUSE Manager Server 4.3:pgadmin4-doc-4.30-150300.3.12.1 SUSE Manager Server 4.3:pgadmin4-web-4.30-150300.3.12.1 openSUSE Leap 15.5:pgadmin4-4.30-150300.3.12.1 openSUSE Leap 15.5:pgadmin4-doc-4.30-150300.3.12.1 openSUSE Leap 15.5:pgadmin4-web-4.30-150300.3.12.1 openSUSE Leap 15.5:pgadmin4-web-uwsgi-4.30-150300.3.12.1 openSUSE Tumbleweed:pgadmin4-8.5-1.1 openSUSE Tumbleweed:pgadmin4-cloud-8.5-1.1 openSUSE Tumbleweed:pgadmin4-desktop-8.5-1.1 openSUSE Tumbleweed:pgadmin4-doc-8.5-1.1 openSUSE Tumbleweed:pgadmin4-web-uwsgi-8.5-1.1 openSUSE Tumbleweed:system-user-pgadmin-8.5-1.1 SUSE Linux Enterprise Module for Python 3 15 SP6:pgadmin4 SUSE Linux Enterprise Module for Python 3 15 SP6:pgadmin4-doc SUSE Linux Enterprise Module for Python 3 15 SP6:pgadmin4-web SUSE Linux Enterprise Module for Python 3 15 SP6:system-user-pgadmin openSUSE Leap 15.6:pgadmin4 openSUSE Leap 15.6:pgadmin4-cloud openSUSE Leap 15.6:pgadmin4-desktop openSUSE Leap 15.6:pgadmin4-doc openSUSE Leap 15.6:pgadmin4-web-uwsgi openSUSE Leap 15.6:system-user-pgadmin important 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H