PT-2021-12706

CVE-2020-8030

·

Published

2021-02-11

·

Updated

2021-02-19

Description by

CVSS 3.1
4.4
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: SUSE CaaS Platform 4.5
Description: A local attacker can exploit an Insecure Temporary File vulnerability in skuba to leak the bootstrapToken or modify the configuration file before it is processed. This can lead to arbitrary modifications of the machine or cluster.
Recommendations: For SUSE CaaS Platform 4.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Researchers
Vendors
Affected products
Weakness enumeration
CWE-377: Insecure Temporary File
Related identifiers
CVE-2020-8030
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com