Skip to content
Sign in
6.1 Medium

CVE-2020-8025 A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server…

Description

A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Tumbleweed sets the permissions for some of the directories of the pcp package to unintended settings. This issue affects: SUSE Linux Enterprise Server 12-SP4 permissions versions prior to 20170707-3.24.1. SUSE Linux Enterprise Server 15-LTSS permissions versions prior to 20180125-3.27.1. SUSE Linux Enterprise Server for SAP 15 permissions versions prior to 20180125-3.27.1. openSUSE Leap 15.1 permissions versions prior to 20181116-lp151.4.24.1. openSUSE Tumbleweed permissions versions prior to 20200624.

Affected products and versions

Product Affected versions Fixed in
SUSE Linux Enterprise Server 12-SP4 20170707 earliest → < 20170707-3.24.1 20170707-3.24.1
SUSE Linux Enterprise Server 15-LTSS 20180125 earliest → < 20180125-3.27.1 20180125-3.27.1
SUSE Linux Enterprise Server for SAP 15 20180125 earliest → < 20180125-3.27.1 20180125-3.27.1
openSUSE Leap 15.1 20181116 earliest → < 20181116-lp151.4.24.1 20181116-lp151.4.24.1
openSUSE Tumbleweed 20200624 earliest → < 20200624 20200624

Other CVEs of SUSE Linux Enterprise Server 12-SP4

The 3 CVEs of SUSE Linux Enterprise Server 12-SP4 →
CVE-2020-8023 A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE… 7.7 High CVE-2020-8022 A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux… 7.7 High
Track this CVE