A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Tumbleweed sets the permissions for some of the directories of the pcp package to unintended settings. This issue affects: SUSE Linux Enterprise Server 12-SP4 permissions versions prior to 20170707-3.24.1. SUSE Linux Enterprise Server 15-LTSS permissions versions prior to 20180125-3.27.1. SUSE Linux Enterprise Server for SAP 15 permissions versions prior to 20180125-3.27.1. openSUSE Leap 15.1 permissions versions prior to 20181116-lp151.4.24.1. openSUSE Tumbleweed permissions versions prior to 20200624.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade libpcp_web1Upgrade perl-PCP-MMVUpgrade pcp-import-mrtg2pcpUpgrade pcp-import-sar2pcpUpgrade libpcp_trace2Upgrade libpcp-develUpgrade pcp-develUpgrade libpcp_gui2Upgrade perl-PCP-LogImportUpgrade libpcp_import1Upgrade libpcp_mmv1Upgrade python-pcpUpgrade permissions-zypp-pluginUpgrade pcp-docUpgrade permissionsUpgrade pcp-import-iostat2pcpUpgrade perl-PCP-PMDAUpgrade pcpUpgrade perl-PCP-LogSummaryUpgrade pcp-confUpgrade libpcp3 | Apr 22, 2021 | Aug 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub