Advisories · Technology
openSUSE Leap 15.2.
Every CVE that names openSUSE Leap 15.2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
arpwatch: Local privilege escalation from runtime user to root
- SUSE Linux Enterprise Server 11-SP4-LTSS
- SUSE Manager Server 4.0
- CWE-61
- CVSS 6.8 Medium
python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root
- openSUSE Leap 15.2
- openSUSE Factory
- CWE-61
- CVSS 6.8 Medium
python-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root
- openSUSE Leap 15.2
- openSUSE Factory
- Path traversal
- CVSS 6.8 Medium
inn: %post calls user owned file allowing local privilege escalation to root
- SUSE Linux Enterprise Server 11-SP3
- openSUSE Backports SLE-15-SP2
- Broken access control
- CVSS 3.3 Low
cups: ownership of /var/log/cups allows the lp user to create files as root
- SUSE Linux Enterprise Server 11-SP4-LTSS
- SUSE Manager Server 4.0
- Broken access control
- CVSS 7.3 High
openldap uses fixed paths in /tmp
- SUSE Linux Enterprise Server 15-LTSS
- SUSE Linux Enterprise Server for SAP 15
- CWE-377
- CVSS 8.4 High
inn: non-root owned files
- openSUSE Leap 15.2
- openSUSE Tumbleweed
- Broken access control
- CVSS 5.3 Medium
Problematic permissions in hylafax+ packaging allow escalation from uucp to other users
- openSUSE Leap 15.2
- openSUSE Leap 15.1
- Broken access control