CVE-2020-8026

EPSS 0.05%
Veröffentlicht 07.08.2020 10:15:11
Zuletzt bearbeitet 21.11.2024 05:38:14
Quelle meissner@suse.de
Teams Watchlist Login
Unerledigt Login

A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new user to escalate their privileges to root. This issue affects: openSUSE Leap 15.2 inn version 2.6.2-lp152.1.26 and prior versions. openSUSE Tumbleweed inn version 2.6.2-4.2 and prior versions. openSUSE Leap 15.1 inn version 2.5.4-lp151.3.3.1 and prior versions.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Opensuse ≫ Backports Sle Version15.0 Updatesp1

Opensuse ≫ Backports Sle Version15.0 Updatesp2

Opensuse ≫ Tumbleweed Version <= 2.6.2-4.2

Opensuse ≫ Leap Version15.1

Opensuse ≫ Leap Version15.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.05%	0.128

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C
meissner@suse.de	8.4	2.5	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H