CVE-2020-8014

CWE-613 documents3 sources
Severity
7.8HIGH
EPSS
0.0%
top 90.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Opensuse Opensuse Leap 15.1Opensuse Opensuse TumbleweedOpensuse Tumbleweed Kopano-spamd+1 more
Timeline
PublishedJun 29
Latest updateMay 24

Description

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1, openSUSE Tumbleweed allowed local attackers with the privileges of the kopano user to escalate to root. This issue affects: openSUSE Leap 15.1 kopano-spamd versions prior to 10.0.5-lp151.4.1. openSUSE Tumbleweed kopano-spamd versions prior to 10.0.5-1.1.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NExploitability: 2.5 | Impact: 5.2

Affected Packages4 packages

▶CVEListV5opensuse/opensuse_leap_15.1kopano-spamd — 10.0.5-lp151.4.1
▶CVEListV5opensuse/opensuse_tumbleweedkopano-spamd — 10.0.5-1.1
▶NVDopensuse/leap15.1

🔴Vulnerability Details

2
GHSA
GHSA-vh3v-64vx-mqg3: A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15↗2022-05-24
▶
CVEList
kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage↗2020-06-29
▶