Description
The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version 2.6.2-2.2 and prior versions. openSUSE Leap 15.1 inn version 2.5.4-lp151.2.47 and prior versions.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SUSE SUSE Linux Enterprise Server 11
inn to ≤ 2.4.2-170.21.3.1affected
openSUSE Factory
inn to ≤ 2.6.2-2.2affected
openSUSE Leap 15.1
inn to ≤ 2.5.4-lp151.2.47affected