Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-18897

Опубликовано: 02 мар. 2020
Источник: nvd
CVSS3: 8.4
CVSS3: 7.8
CVSS2: 7.2
EPSS Низкий

Описание

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master version 2019.2.0-46.83.1 and prior versions. SUSE Linux Enterprise Server 15 salt-master version 2019.2.0-6.21.1 and prior versions. openSUSE Factory salt-master version 2019.2.2-3.1 and prior versions.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

EPSS

Процентиль: 27%
0.00095
Низкий

8.4 High

CVSS3

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-59
CWE-59

Связанные уязвимости

ubuntu логотип

CVE-2019-18897

CVSS3: 8.4
ubuntu
почти 6 лет назад

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master version 2019.2.0-46.83.1 and prior versions. SUSE Linux Enterprise Server 15 salt-master version 2019.2.0-6.21.1 and prior versions. openSUSE Factory salt-master version 2019.2.2-3.1 and prior versions.

redhat логотип

CVE-2019-18897

CVSS3: 7.8
redhat
около 6 лет назад

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master version 2019.2.0-46.83.1 and prior versions. SUSE Linux Enterprise Server 15 salt-master version 2019.2.0-6.21.1 and prior versions. openSUSE Factory salt-master version 2019.2.2-3.1 and prior versions.

debian логотип

CVE-2019-18897

CVSS3: 8.4
debian
почти 6 лет назад

A UNIX Symbolic Link (Symlink) Following vulnerability in the packagin ...

github логотип

GHSA-p48p-8wh6-cj6f

CVSS3: 7.8
github
больше 3 лет назад

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master version 2019.2.0-46.83.1 and prior versions. SUSE Linux Enterprise Server 15 salt-master version 2019.2.0-6.21.1 and prior versions. openSUSE Factory salt-master version 2019.2.2-3.1 and prior versions.

suse-cvrf логотип

openSUSE-SU-2020:0357-1

suse-cvrf
почти 6 лет назад

Security update for salt

EPSS

Процентиль: 27%
0.00095
Низкий

8.4 High

CVSS3

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-59
CWE-59