Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-22029

tomcat packaging allows for escalation to root from tomcat user

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE Container suse/manager/5.0/x86_64/server:5.0.0-beta1.2.122

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Enterprise Storage 7.1

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP5

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise Module for Web and Scripting 15 SP5

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise Server 15 SP5

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP5

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP6

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise Module for Web and Scripting 15 SP6

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise Server 15 SP6

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP6

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise Server 15 SP2-LTSS

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise Server 15 SP3-LTSS

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise Server 15 SP4-LTSS

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP3

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP4

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE SUSE Manager Server 4.3

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE openSUSE Leap 15.5

Default version status: unaffected

  • ? to < 9.0.85-150200.57.1affected

SUSE openSUSE Tumbleweed

Default version status: unaffected

  • ? to < 9.0.85-3.1affected

References