outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 20170707-3.24.1, 20180125-3.27.1, 20181116-lp151.4.24.1, 20200624
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Tumbleweed sets the permissions for some of the directories of the pcp package to unintended settings. This issue affects: SUSE Linux Enterprise Server 12-SP4 permissions versions prior to 20170707-3.24.1. SUSE Linux Enterprise Server 15-LTSS permissions versions prior to 20180125-3.27.1. SUSE Linux Enterprise Server for SAP 15 permissions versions prior to 20180125-3.27.1. openSUSE Leap 15.1 permissions versions prior to 20181116-lp151.4.24.1. openSUSE Tumbleweed permissions versions prior to 20200624.
Timeline
- CVE published
- Record last updated
Affected versions
- SUSE SUSE Linux Enterprise Server 12-SP4
From permissions · fixed in 20170707-3.24.1
- SUSE SUSE Linux Enterprise Server 15-LTSS
From permissions · fixed in 20180125-3.27.1
- SUSE SUSE Linux Enterprise Server for SAP 15
From permissions · fixed in 20180125-3.27.1
- openSUSE openSUSE Leap 15.1
From permissions · fixed in 20181116-lp151.4.24.1
- openSUSE openSUSE Tumbleweed
From permissions · fixed in 20200624