CVE-2020-8015

published 2020-04-02

CVE-2020-8015: A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
exim	exim	< 4.93.0.4-3.1	4.93.0.4-3.1
opensuse	factory	>= exim < 4.93.0.4-3.1	4.93.0.4-3.1

CWE-59