Vulnerability · Published Jul 7, 2023 · Assigned by suse
CVE-2023-32183
High 7.8
In plain English
A high-severity incorrect default permissions in Tumbleweed from openSUSE. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 88.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root This issue affects openSUSE Tumbleweed.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| openSUSE | Tumbleweed | see references |
Weakness: CWE-276 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H