CVE-2019-18901

Katalog CVE

CVSS 5.5 · Medium EPSS 0,38%

Kerentanan Improper Link Resolution Before File Access ('Link Following') pada opensuse leap, suse linux enterprise server. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Server 12 mariadb versions prior to 10.2.31-3.25.1. SUSE Linux Enterprise Server 15 mariadb versions prior to 10.2.31-3.26.1.

Rincian

Terbit di NVD

2 Maret 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-59: Improper Link Resolution Before File Access ('Link Following')

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 30,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00007.html broken link · mailing list · advisory vendor
• https://bugzilla.suse.com/show_bug.cgi?id=1160895 issue tracking · advisory vendor