PT-2019-16648

CVE-2019-3684

·

Published

2019-05-13

·

Updated

2020-12-03

Description by

CVSS 3.1
5.9
Medium
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions SUSE Manager versions prior to 4.0.7 Uyuni versions prior to commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade
Description The issue arises when the system does not have a swap already configured and does not use btrfs as its filesystem, resulting in the creation of world-readable swap files.
Recommendations For SUSE Manager versions prior to 4.0.7, update to version 4.0.7 or later to resolve the issue. For Uyuni versions prior to commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade, update to a version that includes the fix, specifically a commit after 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
SUSE-RU-2019:1703-1
SUSE-SU-2019:1703-1
Found an issue in the description? Have something to add? Feel free to write us 👾