7.8 Élevée

CVE-2022-31254 A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP…

Description

A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-server versions prior to 2.10.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
SUSE Linux Enterprise Server for SAP 15 2.10	premières → < 2.10	2.10
SUSE Linux Enterprise Server for SAP 15-SP1 2.10	premières → < 2.10	2.10
SUSE Manager Server 4.1 2.10	premières → < 2.10	2.10
openSUSE Leap 15.3 2.10	premières → < 2.10	2.10
openSUSE Leap 15.4 2.10	premières → < 2.10	2.10

Références

bugzilla.suse.com bugzilla.suse.com

Chronologie

Publiée 7 février 2023
Dernière modification 25 mars 2025

Les 8 CVE de SUSE Linux Enterprise Server for SAP 15 →

CVE-2020-8027 A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise… 7.3 Élevée CVE-2020-8023 A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE… 7.7 Élevée CVE-2020-8025 A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server… 6.1 Moyenne CVE-2020-8022 A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux… 7.7 Élevée

Suivre cette CVE