CVE-2019-3687

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119aa

Description The issue in the permission package of SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile, enabling them to sniff network traffic.

Recommendations For SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119aa, consider restricting the use of the "easy" permission profile to prevent unauthorized access to network traffic. At the moment, there is no information about a newer version that contains a fix for this vulnerability.