CVE-2023-22644: Suse Manager Server

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE.

Affected products

• Suse Manager Server: from 4.2, before 4.2.50-150300.3.66.5 (fixed in 4.2.50-150300.3.66.5); from 4.3, before 4.3.58-150400.3.46.4 (fixed in 4.3.58-150400.3.46.4)

Published 2023-09-20. Last modified 2026-06-17.