CVE-2022-31254: high-severity vulnerability in SUSE Linux Enterprise Server for SAP 15
rmt-server-pubcloud allows to escalate from user _rmt to root
Published · Updated
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 0.2%
exploitation probability
0.2%top 84% of all CVEs
observed exploitation
nono source reports it
A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-server versions prior to 2.10.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
openSUSE · openSUSE Leap 15.3openSUSE · openSUSE Leap 15.4SUSE · SUSE Linux Enterprise Server for SAP 15SUSE · SUSE Linux Enterprise Server for SAP 15-SP1SUSE · SUSE Manager Server 4.1Related CVEs — SUSE Linux Enterprise Server for SAP 15
In the same product, most dangerous first.
CVE-2023-22643MEDIUMlibzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` callsEPSS 2.4%CVE-2019-18904MEDIUMMigrations requests can cause DoS on rmtEPSS 1.6%CVE-2020-8022HIGHUser-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviligesEPSS 0.9%CVE-2020-8025MEDIUMoutdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issuesEPSS 0.5%CVE-2019-3695HIGHpcp: Local privilege escalation from user pcp to rootEPSS 0.5%CVE-2019-3696HIGHpcp: Local privilege escalation from user pcp to root through migrate_tempdirsEPSS 0.5%