Skip to content
fr Sign in
7.8 High

CVE-2022-31254 A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP…

Description

A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-server versions prior to 2.10.

Affected products and versions

Product Affected versions Fixed in
SUSE Linux Enterprise Server for SAP 15 2.10 earliest → < 2.10 2.10
SUSE Linux Enterprise Server for SAP 15-SP1 2.10 earliest → < 2.10 2.10
SUSE Manager Server 4.1 2.10 earliest → < 2.10 2.10
openSUSE Leap 15.3 2.10 earliest → < 2.10 2.10
openSUSE Leap 15.4 2.10 earliest → < 2.10 2.10

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SUSE Linux Enterprise Server for SAP 15

The 8 CVEs of SUSE Linux Enterprise Server for SAP 15 →
CVE-2020-8027 A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise… 7.3 High CVE-2020-8023 A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE… 7.7 High CVE-2020-8025 A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server… 6.1 Medium CVE-2020-8022 A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux… 7.7 High
Track this CVE