CVE-2020-8013

Katalog CVE

CVSS 2.5 · Low EPSS 0,32%

Kerentanan Improper Link Resolution Before File Access ('Link Following') pada suse linux enterprise server, opensuse leap. Skor CVSS 3.1 2.5 (Low) menurut NVD.

Deskripsi (NVD)

A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12 permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to 2013.1.7-0.6.12.1.

Rincian

Terbit di NVD

2 Maret 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

2.5 (Low), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-59: Improper Link Resolution Before File Access ('Link Following')

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 22,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html mailing list · advisory vendor
• https://bugzilla.suse.com/show_bug.cgi?id=1163922 issue tracking · advisory vendor