Description
A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user This issue affects: SUSE Linux Enterprise Server 15 SP1 SLES15-SP1-CAP-Deployment-BYOS version 1.0.1 and prior versions; SLES15-SP1-CHOST-BYOS versions prior to 1.0.3 and prior versions;
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| SUSE | SUSE Linux Enterprise Server 15 SP1 | affected |
|
||||||
| SUSE | SUSE Linux Enterprise Server 15 SP1 | affected |
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2020-28931 | A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user This issue affects: SUSE Linux Enterprise Server 15 SP1 SLES15-SP1-CAP-Deployment-BYOS version 1.0.1 and prior versions; SLES15-SP1-CHOST-BYOS versions prior to 1.0.3 and prior versions; |
References
| Link | Providers |
|---|---|
| https://bugzilla.suse.com/show_bug.cgi?id=1163813 |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: suse
Published:
Updated: 2024-09-16T20:47:16.896Z
Reserved: 2020-01-27T00:00:00.000Z
Link: CVE-2020-8018
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-05-04T12:15:12.840
Modified: 2024-11-21T05:38:13.693
Link: CVE-2020-8018
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses