Suse Caas Platform 3.0 vulnerabilities

1 known vulnerability affecting suse/caas_platform_3.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

LOW1

Vulnerabilities

Page 1 of 1

CVE-2019-18900LOWCVSS 3.3≥ libzypp, < 16.21.2-27.68.12020-01-24

CVE-2019-18900 [MEDIUM] CWE-276 CVE-2019-18900: : Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enter : Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform 3.0 libzypp versions prior to 16.21.2-27.68.1. SUSE Linux Enterprise Serv