PT-2020-19922
CVE-2020-8018
·
تاريخ النشر
2020-05-04
·
تاريخ التحديث
2020-05-12
الوصف من
CVSS 3.1
8.4
عاليةالمقاييسAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SUSE Linux Enterprise Server 15 SP1 SLES15-SP1-CAP-Deployment-BYOS versions prior to 1.0.1
SUSE Linux Enterprise Server 15 SP1 SLES15-SP1-CHOST-BYOS versions prior to 1.0.3
Description
A vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user.
Recommendations
For SLES15-SP1-CAP-Deployment-BYOS versions prior to 1.0.1, update to version 1.0.1 or later to resolve the issue.
For SLES15-SP1-CHOST-BYOS versions prior to 1.0.3, update to version 1.0.3 or later to resolve the issue.
As a temporary workaround, consider restricting access to the /etc directory to prevent local attackers from escalating to root.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾