CVE-2021-25314

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise High Availability 12-SP3 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9 SUSE Linux Enterprise High Availability 12-SP5 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9 SUSE Linux Enterprise High Availability 15-SP2 hawk2 versions prior to 2.6.3+git.1614684118.af555ad9

Description A Creation of Temporary File With Insecure Permissions issue in hawk2 allows local attackers to escalate to root. This issue is related to the creation of temporary files with insecure permissions in the hawk2 web interface of SUSE Linux Enterprise Server and OpenSUSE Leap operating systems. Exploitation of this issue may allow an attacker to elevate their privileges.

Recommendations For SUSE Linux Enterprise High Availability 12-SP3 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9, update to version 2.6.3+git.1614685906.812c31e9 or later. For SUSE Linux Enterprise High Availability 12-SP5 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9, update to version 2.6.3+git.1614685906.812c31e9 or later. For SUSE Linux Enterprise High Availability 15-SP2 hawk2 versions prior to 2.6.3+git.1614684118.af555ad9, update to version 2.6.3+git.1614684118.af555ad9 or later.