vulnerability

SUSE: CVE-2018-17955: SUSE Linux Security Advisory

Severity
4
CVSS
(AV:L/AC:L/Au:N/C:N/I:P/A:P)
Published
Mar 15, 2019
Added
Feb 4, 2022
Modified
Feb 4, 2022

Description

In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection

Solution

suse-upgrade-yast2-multipath
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.