CVE-2020-8025
published 2020-08-07CVE-2020-8025: A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server…
critical9.3CVSS 3.1
AVLACLPRNUINSCCHIHAH
A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Tumbleweed sets the permissions for some of the directories of the pcp package to unintended settings. This issue affects: SUSE Linux Enterprise Server 12-SP4 permissions versions prior to 20170707-3.24.1. SUSE Linux Enterprise Server 15-LTSS permissions versions prior to 20180125-3.27.1. SUSE Linux Enterprise Server for SAP 15 permissions versions prior to 20180125-3.27.1. openSUSE Leap 15.1 permissions versions prior to 20181116-lp151.4.24.1. openSUSE Tumbleweed permissions versions prior to 20200624.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| opensuse | opensuse_leap_15.1 | >= permissions < 20181116-lp151.4.24.1 | 20181116-lp151.4.24.1 |
| opensuse | opensuse_tumbleweed | >= permissions < 20200624 | 20200624 |
| suse | linux_enterprise_high_performance_computing | — | — |
| suse | linux_enterprise_server | — | — |
| suse | linux_enterprise_software_development_kit | — | — |
| suse | suse_linux_enterprise_server_12-sp4 | >= permissions < 20170707-3.24.1 | 20170707-3.24.1 |
| suse | suse_linux_enterprise_server_15-ltss | >= permissions < 20180125-3.27.1 | 20180125-3.27.1 |
| suse | suse_linux_enterprise_server_for_sap_15 | >= permissions < 20180125-3.27.1 | 20180125-3.27.1 |