Skip to content
fr Sign in
7.7 High

CVE-2019-3694 A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows…

Description

A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin to root. This issue affects: openSUSE Factory munin version 2.0.49-4.2 and prior versions. openSUSE Leap 15.1 munin version 2.0.40-lp151.1.1 and prior versions.

Affected products and versions

Product Affected versions Fixed in
Factory 2.0 earliest → 2.0.49-4.2 No fix stated
Leap 15.1 2.0 earliest → 2.0.40-lp151.1.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Factory

The 24 CVEs of Factory →
CVE-2022-31253 A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap… 7.1 High CVE-2022-21946 A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of… 5.3 Medium CVE-2022-21945 A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen… 5.1 Medium CVE-2022-21944 A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports… 7.8 High
Track this CVE