CVE-2020-15396

Name of the Vulnerable Software and Affected Versions HylaFAX+ versions prior to 7.0.3 HylaFAX Enterprise (affected versions not specified)

Description The issue allows a local attacker to potentially escalate privileges to root by exploiting a race condition in the faxsetup utility, which uses chown on files in user-owned directories.

Recommendations For HylaFAX+ versions prior to 7.0.3, update to version 7.0.3 or later to resolve the issue. For HylaFAX Enterprise, at the moment, there is no information about a newer version that contains a fix for this vulnerability.