PT-2023-2142
CVE-2022-31254
·
تاريخ النشر
2023-01-03
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10
SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10
SUSE Manager Server 4.1 rmt-server versions prior to 2.10
openSUSE Leap 15.3 rmt-server versions prior to 2.10
openSUSE Leap 15.4 rmt-server versions prior to 2.10
Description
The issue is related to incorrect default permissions in the rmt-server-regsharing service of SUSE Linux Enterprise Server, allowing local attackers with access to the rmt user to escalate to root. This can be exploited by attackers to gain elevated privileges.
Recommendations
For SUSE Linux Enterprise Server for SAP 15, update the rmt-server to version 2.10 or later.
For SUSE Linux Enterprise Server for SAP 15-SP1, update the rmt-server to version 2.10 or later.
For SUSE Manager Server 4.1, update the rmt-server to version 2.10 or later.
For openSUSE Leap 15.3, update the rmt-server to version 2.10 or later.
For openSUSE Leap 15.4, update the rmt-server to version 2.10 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾