Description
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master version 2019.2.0-46.83.1 and prior versions. SUSE Linux Enterprise Server 15 salt-master version 2019.2.0-6.21.1 and prior versions. openSUSE Factory salt-master version 2019.2.2-3.1 and prior versions.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SUSE SUSE Linux Enterprise Server 12
salt-master to ≤ 2019.2.0-46.83.1affected
SUSE SUSE Linux Enterprise Server 15
salt-master to ≤ 2019.2.0-6.21.1affected
openSUSE Factory
salt-master to ≤ 2019.2.2-3.1affected