CVE-2023-22644
CVE-2023-22644 is a medium-severity vulnerability in Suse Manager Server with a CVSS 3.x base score of 5.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-1270.
Key facts
- Severity: Medium (CVSS 3.x base score 5.5)
- CVSS v4: 9.4
- EPSS exploit prediction: 0% (36th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-1270
- Affected product: Suse Manager Server
- Published:
- Last modified:
Description
A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE.
Frequently asked questions
- What is CVE-2023-22644?
- A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE.
- How severe is CVE-2023-22644?
- CVE-2023-22644 has a CVSS 3.x base score of 5.5, rated medium severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.
- Is CVE-2023-22644 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (36th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2023-22644?
- CVE-2023-22644 affects Suse Manager Server. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2023-22644?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2023-22644 published?
- CVE-2023-22644 was published on 2023-09-20 and last updated on 2026-06-17.
References
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32188
- https://github.com/neuvector/neuvector/security/advisories/GHSA-622h-h2p8-743x
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22644
Affected products (1)
- cpe:2.3:a:suse:manager_server:*:*:*:*:*:*:*:*
More vulnerabilities in Suse Manager Server
- CVE-2026-31431 — High (CVSS 7.8): In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating…
- CVE-2022-27239 — High (CVSS 7.8): In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could…
- CVE-2021-4034 — High (CVSS 7.8): A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid…
- CVE-2023-29552 — High (CVSS 7.5): The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary…
- CVE-2022-21952 — High (CVSS 7.5): A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager…
- CVE-2022-31248 — Medium (CVSS 5.3): A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2…
All CVEs affecting Suse Manager Server →
Other CWE-1270 vulnerabilities
- CVE-2023-2882 — Critical (CVSS 9.8): Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege…
- CVE-2023-32188 — Critical (CVSS 9.4): A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a…
- CVE-2025-59698 — Medium (CVSS 6.8): Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, might allow a physically proximate…
- CVE-2023-30524 — Medium (CVSS 4.3): Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration…