Към съдържанието
Търсене

CVE-2020-8022: SUSE Enterprise Storage 5, лоша конфигурация

7.7

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8 allows local attackers to escalate from group tomcat to root. This issue affects: SUSE Enterprise Storage 5 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP2-BCL tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP2-LTSS tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP3-BCL tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP3-LTSS tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP4 tomcat versions prior to 9.0.35-3.39.1. SUSE Linux Enterprise Server 12-SP5 tomcat versions prior to 9.0.35-3.39.1. SUSE Linux Enterprise Server 15-LTSS tomcat versions prior to 9.0.35-3.57.3. SUSE Linux Enterprise Server for SAP 12-SP2 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server for SAP 12-SP3 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server for SAP 15 tomcat versions prior to 9.0.35-3.57.3. SUSE OpenStack Cloud 7 tomcat versions prior to 8.0.53-29.32.1. SUSE OpenStack Cloud 8 tomcat versions prior to 8.0.53-29.32.1. SUSE OpenStack Cloud Crowbar 8 tomcat versions prior to 8.0.53-29.32.1.

Засегнати продукти

  • SUSE SUSE Enterprise Storage 5: tomcat преди 8.0.53-29.32.1
  • SUSE SUSE Linux Enterprise Server 12-SP2-BCL: tomcat преди 8.0.53-29.32.1
  • SUSE SUSE Linux Enterprise Server 12-SP2-LTSS: tomcat преди 8.0.53-29.32.1
  • SUSE SUSE Linux Enterprise Server 12-SP3-BCL: tomcat преди 8.0.53-29.32.1
  • SUSE SUSE Linux Enterprise Server 12-SP3-LTSS: tomcat преди 8.0.53-29.32.1
  • SUSE SUSE Linux Enterprise Server 12-SP4: tomcat преди 9.0.35-3.39.1
  • SUSE SUSE Linux Enterprise Server 12-SP5: tomcat преди 9.0.35-3.39.1
  • SUSE SUSE Linux Enterprise Server 15-LTSS: tomcat преди 9.0.35-3.57.3
  • SUSE SUSE Linux Enterprise Server for SAP 12-SP2: tomcat преди 8.0.53-29.32.1
  • SUSE SUSE Linux Enterprise Server for SAP 12-SP3: tomcat преди 8.0.53-29.32.1
  • SUSE SUSE Linux Enterprise Server for SAP 15: tomcat преди 9.0.35-3.57.3
  • SUSE SUSE OpenStack Cloud 7: tomcat преди 8.0.53-29.32.1
  • SUSE SUSE OpenStack Cloud 8: tomcat преди 8.0.53-29.32.1
  • SUSE SUSE OpenStack Cloud Crowbar 8: tomcat преди 8.0.53-29.32.1

Вид слабост

История

  • 29 юни 2020 Публикувано

Други уязвимости в SUSE SUSE Enterprise Storage 5

Първоизточници

CVE-2020-8022: SUSE Enterprise Storage 5, лоша конфигурация | freedomonline.bg