CVE-2018-12470 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-12470 Interim 1 18 2025-03-25T00:32:51Z current 2021-05-30T14:14:27Z 2025-03-25T00:32:51Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-12470 A SQL Injection in the RegistrationSharing module of SUSE Linux SMT allows remote attackers to cause execute arbitrary SQL statements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2018-September/004613.html E-Mail link for SUSE-SU-2018:2898-1 https://lists.suse.com/pipermail/sle-security-updates/2018-October/004724.html E-Mail link for SUSE-SU-2018:2898-2 https://lists.suse.com/pipermail/sle-security-updates/2018-September/004614.html E-Mail link for SUSE-SU-2018:2899-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 4 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 7 Subscription Management Tool 11 SP3 perl-File-Touch-0.11-3.2.2 res-signingkeys-2.0.34-50.8.1 res-signingkeys-3.0.37-52.23.6 res-signingkeys-3.0.38-52.26.1 res-signingkeys-3.0.42-52.38.1 smt-2.0.34-50.8.1 smt-3.0.37-52.23.6 smt-3.0.38-52.26.1 smt-3.0.42-52.38.1 smt-ha-3.0.37-52.23.6 smt-support-2.0.34-50.8.1 smt-support-3.0.37-52.23.6 smt-support-3.0.38-52.26.1 smt-support-3.0.42-52.38.1 yast2-smt-3.0.14-10.6.2 res-signingkeys-3.0.37-52.23.6 as a component of SUSE Enterprise Storage 4 smt-3.0.37-52.23.6 as a component of SUSE Enterprise Storage 4 smt-support-3.0.37-52.23.6 as a component of SUSE Enterprise Storage 4 res-signingkeys-3.0.42-52.38.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 smt-3.0.42-52.38.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 smt-support-3.0.42-52.38.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 perl-File-Touch-0.11-3.2.2 as a component of SUSE Linux Enterprise Module for Public Cloud 12 smt-ha-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Module for Public Cloud 12 res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS yast2-smt-3.0.14-10.6.2 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-BCL smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-BCL smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-BCL res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-ESPOS smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-ESPOS smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-ESPOS res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP3 smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP3 smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP3 res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA res-signingkeys-3.0.38-52.26.1 as a component of SUSE Linux Enterprise Server 12 SP4 smt-3.0.38-52.26.1 as a component of SUSE Linux Enterprise Server 12 SP4 smt-support-3.0.38-52.26.1 as a component of SUSE Linux Enterprise Server 12 SP4 res-signingkeys-3.0.42-52.38.1 as a component of SUSE Linux Enterprise Server 12 SP5 smt-3.0.42-52.38.1 as a component of SUSE Linux Enterprise Server 12 SP5 smt-support-3.0.42-52.38.1 as a component of SUSE Linux Enterprise Server 12 SP5 res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 yast2-smt-3.0.14-10.6.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 res-signingkeys-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 smt-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 smt-support-3.0.37-52.23.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 res-signingkeys-3.0.42-52.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 smt-3.0.42-52.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 smt-support-3.0.42-52.38.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 res-signingkeys-3.0.37-52.23.6 as a component of SUSE OpenStack Cloud 7 smt-3.0.37-52.23.6 as a component of SUSE OpenStack Cloud 7 smt-support-3.0.37-52.23.6 as a component of SUSE OpenStack Cloud 7 res-signingkeys-2.0.34-50.8.1 as a component of Subscription Management Tool 11 SP3 smt-2.0.34-50.8.1 as a component of Subscription Management Tool 11 SP3 smt-support-2.0.34-50.8.1 as a component of Subscription Management Tool 11 SP3 A SQL Injection in the RegistrationSharing module of SUSE Linux SMT allows remote attackers to cause execute arbitrary SQL statements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37. CVE-2018-12470 SUSE Enterprise Storage 4:res-signingkeys-3.0.37-52.23.6 SUSE Enterprise Storage 4:smt-3.0.37-52.23.6 SUSE Enterprise Storage 4:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise High Performance Computing 12 SP5:res-signingkeys-3.0.42-52.38.1 SUSE Linux Enterprise High Performance Computing 12 SP5:smt-3.0.42-52.38.1 SUSE Linux Enterprise High Performance Computing 12 SP5:smt-support-3.0.42-52.38.1 SUSE Linux Enterprise Module for Public Cloud 12:perl-File-Touch-0.11-3.2.2 SUSE Linux Enterprise Module for Public Cloud 12:smt-ha-3.0.37-52.23.6 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT:smt-3.0.37-52.23.6 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP1-LTSS:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP1-LTSS:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP1-LTSS:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP1-LTSS:yast2-smt-3.0.14-10.6.2 SUSE Linux Enterprise Server 12 SP2-BCL:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-BCL:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-BCL:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-ESPOS:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-ESPOS:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-ESPOS:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-LTSS:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-LTSS:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP2-LTSS:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP3:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP3:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP3:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP3-TERADATA:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP3-TERADATA:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP3-TERADATA:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server 12 SP4:res-signingkeys-3.0.38-52.26.1 SUSE Linux Enterprise Server 12 SP4:smt-3.0.38-52.26.1 SUSE Linux Enterprise Server 12 SP4:smt-support-3.0.38-52.26.1 SUSE Linux Enterprise Server 12 SP5:res-signingkeys-3.0.42-52.38.1 SUSE Linux Enterprise Server 12 SP5:smt-3.0.42-52.38.1 SUSE Linux Enterprise Server 12 SP5:smt-support-3.0.42-52.38.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:yast2-smt-3.0.14-10.6.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:res-signingkeys-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:smt-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:smt-support-3.0.37-52.23.6 SUSE Linux Enterprise Server for SAP Applications 12 SP5:res-signingkeys-3.0.42-52.38.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:smt-3.0.42-52.38.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:smt-support-3.0.42-52.38.1 SUSE OpenStack Cloud 7:res-signingkeys-3.0.37-52.23.6 SUSE OpenStack Cloud 7:smt-3.0.37-52.23.6 SUSE OpenStack Cloud 7:smt-support-3.0.37-52.23.6 Subscription Management Tool 11 SP3:res-signingkeys-2.0.34-50.8.1 Subscription Management Tool 11 SP3:smt-2.0.34-50.8.1 Subscription Management Tool 11 SP3:smt-support-2.0.34-50.8.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H