PT-2020-10009
CVE-2019-18901
·
تاريخ النشر
2020-02-26
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
mariadb versions prior to 10.2.31-3.25.1 on SUSE Linux Enterprise Server 12
mariadb versions prior to 10.2.31-3.26.1 on SUSE Linux Enterprise Server 15
Description
A UNIX Symbolic Link (Symlink) Following issue in the mysql-systemd-helper of the mariadb packaging allows local attackers to change the permissions of arbitrary files to 0640.
Recommendations
For mariadb versions prior to 10.2.31-3.25.1 on SUSE Linux Enterprise Server 12, update to version 10.2.31-3.25.1 or later.
For mariadb versions prior to 10.2.31-3.26.1 on SUSE Linux Enterprise Server 15, update to version 10.2.31-3.26.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾