CVE-2023-32182

published 2023-09-19

CVE-2023-32182: A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise…

Priority P3 40 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This issue affects SUSE Linux Enterprise Desktop 15 SP5: before 3.7.3-150500.3.5.1; SUSE Linux Enterprise High Performance Computing 15 SP5: before 3.7.3-150500.3.5.1; openSUSE Leap 15.5 : before 3.7.3-150500.3.5.1.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
opensuse	leap	—	—
suse	linux_enterprise_high_performance_computing	—	—
suse	opensuse_leap_15.5	>= ? < 3.7.3-150500.3.5.1	3.7.3-150500.3.5.1
suse	suse_linux_enterprise_desktop	—	—
suse	suse_linux_enterprise_desktop_15_sp5	>= ? < 3.7.3-150500.3.5.1	3.7.3-150500.3.5.1
suse	suse_linux_enterprise_high_performance_computing_15_sp5	>= ? < 3.7.3-150500.3.5.1	3.7.3-150500.3.5.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-59