inn: non-root owned files
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.4epss 0.4%
probabilidad de explotación
0.4%top 70% de las CVE
explotación observada
noninguna fuente lo reporta
A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new user to escalate their privileges to root. This issue affects: openSUSE Leap 15.2 inn version 2.6.2-lp152.1.26 and prior versions. openSUSE Tumbleweed inn version 2.6.2-4.2 and prior versions. openSUSE Leap 15.1 inn version 2.5.4-lp151.3.3.1 and prior versions.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
openSUSE · openSUSE Leap 15.1openSUSE · openSUSE Leap 15.2openSUSE · openSUSE TumbleweedReferencias
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00063.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-08/msg00064.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-08/msg00074.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-09/msg00038.htmlhttps://bugzilla.suse.com/show_bug.cgi?id=1172573