Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2020-8026

inn: non-root owned files

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new user to escalate their privileges to root. This issue affects: openSUSE Leap 15.2 inn version 2.6.2-lp152.1.26 and prior versions. openSUSE Tumbleweed inn version 2.6.2-4.2 and prior versions. openSUSE Leap 15.1 inn version 2.5.4-lp151.3.3.1 and prior versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

openSUSE openSUSE Leap 15.2

  • inn to ≤ 2.6.2-lp152.1.26affected

openSUSE openSUSE Tumbleweed

  • inn to ≤ 2.6.2-4.2affected

openSUSE openSUSE Leap 15.1

  • inn to ≤ 2.5.4-lp151.3.3.1affected

References