Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-31998

Опубликовано: 10 июн. 2021
Источник: nvd
CVSS3: 6.8
CVSS3: 7.8
CVSS2: 7.2
EPSS Низкий

Описание

A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their privileges from the news user to root. This issue affects: SUSE Linux Enterprise Server 11-SP3 inn version inn-2.4.2-170.21.3.1 and prior versions. openSUSE Backports SLE-15-SP2 inn versions prior to 2.6.2. openSUSE Leap 15.2 inn versions prior to 2.6.2.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:opensuse:inn:*:*:*:*:*:*:*:*
Версия до 2.4.2-170.21.3.1 (включая)
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*
Конфигурация 2

Одновременно

cpe:2.3:a:opensuse:inn:*:*:*:*:*:*:*:*
Версия до 2.6.2 (исключая)

Одно из

cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*

EPSS

Процентиль: 8%
0.00029
Низкий

6.8 Medium

CVSS3

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 6.8
ubuntu
больше 4 лет назад

A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their privileges from the news user to root. This issue affects: SUSE Linux Enterprise Server 11-SP3 inn version inn-2.4.2-170.21.3.1 and prior versions. openSUSE Backports SLE-15-SP2 inn versions prior to 2.6.2. openSUSE Leap 15.2 inn versions prior to 2.6.2.

CVSS3: 6.8
debian
больше 4 лет назад

A Incorrect Default Permissions vulnerability in the packaging of inn ...

suse-cvrf
больше 4 лет назад

Security update for inn

suse-cvrf
больше 4 лет назад

Security update for inn

github
больше 3 лет назад

A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their privileges from the news user to root. This issue affects: SUSE Linux Enterprise Server 11-SP3 inn version inn-2.4.2-170.21.3.1 and prior versions. openSUSE Backports SLE-15-SP2 inn versions prior to 2.6.2. openSUSE Leap 15.2 inn versions prior to 2.6.2.

EPSS

Процентиль: 8%
0.00029
Низкий

6.8 Medium

CVSS3

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-276