← Back

CVE-2020-8025

nvd nist
Published: Aug 7, 2020Modified: Jun 17, 2026

JSON object

Loading...
9.3
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploitability: 2.5 / Impact: 6.0
Source: NVD

Description

A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Tumbleweed sets the permissions for some of the directories of the pcp package to unintended settings. This issue affects: SUSE Linux Enterprise Server 12-SP4 permissions versions prior to 20170707-3.24.1. SUSE Linux Enterprise Server 15-LTSS permissions versions prior to 20180125-3.27.1. SUSE Linux Enterprise Server for SAP 15 permissions versions prior to 20180125-3.27.1. openSUSE Leap 15.1 permissions versions prior to 20181116-lp151.4.24.1. openSUSE Tumbleweed permissions versions prior to 20200624.

Affected (7)

Suse
3 products
Linux Enterprise High Performance Computing
Linux Enterprise Server
Linux Enterprise Software Development Kit
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Suse
Linux Enterprise High Performance Computing
Version 15
Linux Enterprise High Performance Computing
Version 15
Suse
Linux Enterprise Server
Version 15
Linux Enterprise Server
Version 15 sp1
Linux Enterprise Server
Version 15 sp2
Suse
Linux Enterprise Software Development Kit
Version 12 sp4
Linux Enterprise Software Development Kit
Version 12 sp5

Related CWEs

CWE-279
Incorrect Execution-Assigned Permissions
While it is executing, the product sets the permissions of an object in a way that violates the intended permissions that have been specified by the user.

References (2)

Source: meissner@suse.de
ExploitIssue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingVendor Advisory

Timeline

No history available yet.