7.8
High
CVE-2023-32183 Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the…
Description
Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root This issue affects openSUSE Tumbleweed.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tumbleweed 2.6 | earliest → < 2.6.4+git.1682509819.1ff135ea-269.5 | 2.6.4+git.1682509819.1ff135ea-269.5 |
References
- bugzilla.suse.com bugzilla.suse.com
Timeline
- Published
- Last modified
Other CVEs of Tumbleweed
The 9 CVEs of Tumbleweed →
CVE-2026-104618
On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log
6.2
Medium
CVE-2026-104617
There are two invocations of `qrencode` to display a QR code for scanning
5.1
Medium
CVE-2025-53881
A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege…
6.9
Medium
CVE-2025-46810
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the…
8.5
High