CVE-2020-8032 — Insecure Temporary File in Factory

CWE-377 — Insecure Temporary File6 documents6 sources
Severity
7.0HIGHNVD
CNA6.7
EPSS
0.1%
top 67.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Opensuse FactoryOpensuse Cyrus-sasl
Timeline
PublishedFeb 25
Latest updateMay 24

Description

A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5opensuse/factorycyrus-sasl — 2.1.27-4.2

🔴Vulnerability Details

3
GHSA
GHSA-rg43-4x9m-w9jh: A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root↗2022-05-24
▶
OSV
CVE-2020-8032: A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root↗2021-02-25
▶
CVEList
Local privilege escalation to root due to insecure tmp file usage↗2021-02-25
▶

📋Vendor Advisories

2
Microsoft
Local privilege escalation to root due to insecure tmp file usage↗2021-02-09
▶
Debian
CVE-2020-8032: cyrus-sasl2 - A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSU...↗2020
▶
CVE-2020-8032 — Insecure Temporary File in Factory | cvebase