A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Tumbleweed sets the permissions for some of the directories of the pcp package to unintended settings. This issue affects: SUSE Linux Enterprise Server 12-SP4 permissions versions prior to 20170707-3.24.1. SUSE Linux Enterprise Server 15-LTSS permissions versions prior to 20180125-3.27.1. SUSE Linux Enterprise Server for SAP 15 permissions versions prior to 20180125-3.27.1. openSUSE Leap 15.1 permissions versions prior to 20181116-lp151.4.24.1. openSUSE Tumbleweed permissions versions prior to 20200624.
References
| Link | Resource |
|---|---|
| https://bugzilla.suse.com/show_bug.cgi?id=1171883 | Exploit Issue Tracking Vendor Advisory |
| https://bugzilla.suse.com/show_bug.cgi?id=1171883 | Exploit Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:38
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.suse.com/show_bug.cgi?id=1171883 - Exploit, Issue Tracking, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 4.6
v3 : 6.1 |
Information
Published : 2020-08-07 10:15
Updated : 2024-11-21 05:38
NVD link : CVE-2020-8025
Mitre link : CVE-2020-8025
CVE.ORG link : CVE-2020-8025
JSON object : View
Products Affected
suse
- linux_enterprise_server
- linux_enterprise_high_performance_computing
- linux_enterprise_software_development_kit
CWE
CWE-279
Incorrect Execution-Assigned Permissions