prometheus-formula (SUSE:Manager Server Module 4.3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Manager Server Module 4.3 package prometheus-formula, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2023-31582 — CVSS 7.5 (high): jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.
• CVE-2023-32189 — CVSS 5.9 (medium): Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys