7.3

CVE-2020-8027

Exploit

A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.37.1. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.37.1. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.18.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.9.1.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Opensuse ≫ Openldap2 Version < 2.4.46-9.37.1
   Suse ≫ Linux Enterprise Server Version15 SwEditionltss
Opensuse ≫ Openldap2 Version < 2.4.46-9.37.1
   Suse ≫ Linux Enterprise Server Version15 SwPlatformsap
Opensuse ≫ Openldap2 Version < 2.4.46-lp151.10.18.1
   Opensuse ≫ Leap Version15.1
Opensuse ≫ Openldap2 Version < 2.4.46-lp152.14.9.1
   Opensuse ≫ Leap Version15.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.09
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.6 1.8 4.7
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
meissner@suse.de 7.3 2.5 4.7
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CWE-377 Insecure Temporary File

Creating and using insecure temporary files can leave application and system data vulnerable to attack.

https://bugzilla.suse.com/show_bug.cgi?id=1175568
Vendor Advisory
Exploit
Issue Tracking