Log in Start free

Vulnerability · Published May 4, 2020 · Assigned by suse

CVE-2020-8018User owned /etc in SLES15-SP1-CHOST-BYOS

High 8.4

In plain English

A high-severity incorrect default permissions in SUSE Linux Enterprise Server 15 SP1 from SUSE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).

Severity (CVSS 3.1)8.4High
Exploit odds (30 days)0.3%top 78.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user This issue affects: SUSE Linux Enterprise Server 15 SP1 SLES15-SP1-CAP-Deployment-BYOS version 1.0.1 and prior versions; SLES15-SP1-CHOST-BYOS versions prior to 1.0.3 and prior versions;

Affected products (as reported)

VendorProductVersions
SUSE SUSE Linux Enterprise Server 15 SP1 SLES15-SP1-CAP-Deployment-BYOS – through 1.0.1
SUSE SUSE Linux Enterprise Server 15 SP1 SLES15-SP1-CHOST-BYOS – through 1.0.3

Weakness: CWE-276 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References