Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-31251

slurm: %post for slurm-testsuite operates as root in user owned directory

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE openSUSE Factory

  • slurm to < 22.05.2-3.3affected

References