A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Server 12 mariadb versions prior to 10.2.31-3.25.1. SUSE Linux Enterprise Server 15 mariadb versions prior to 10.2.31-3.26.1.
References
| Link | Resource |
|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00007.html | Broken Link Mailing List Vendor Advisory |
| https://bugzilla.suse.com/show_bug.cgi?id=1160895 | Issue Tracking Vendor Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00007.html | Broken Link Mailing List Vendor Advisory |
| https://bugzilla.suse.com/show_bug.cgi?id=1160895 | Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 04:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00007.html - Broken Link, Mailing List, Vendor Advisory | |
| References | () https://bugzilla.suse.com/show_bug.cgi?id=1160895 - Issue Tracking, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 5.1 |
Information
Published : 2020-03-02 16:15
Updated : 2024-11-21 04:33
NVD link : CVE-2019-18901
Mitre link : CVE-2019-18901
CVE.ORG link : CVE-2019-18901
JSON object : View
Products Affected
suse
- linux_enterprise_server
opensuse
- leap
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')