CVE-2022-31254

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10 SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10 SUSE Manager Server 4.1 rmt-server versions prior to 2.10 openSUSE Leap 15.3 rmt-server versions prior to 2.10 openSUSE Leap 15.4 rmt-server versions prior to 2.10

Description The issue is related to incorrect default permissions in the rmt-server-regsharing service of SUSE Linux Enterprise Server, allowing local attackers with access to the rmt user to escalate to root. This can be exploited by attackers to gain elevated privileges.

Recommendations For SUSE Linux Enterprise Server for SAP 15, update the rmt-server to version 2.10 or later. For SUSE Linux Enterprise Server for SAP 15-SP1, update the rmt-server to version 2.10 or later. For SUSE Manager Server 4.1, update the rmt-server to version 2.10 or later. For openSUSE Leap 15.3, update the rmt-server to version 2.10 or later. For openSUSE Leap 15.4, update the rmt-server to version 2.10 or later.