CVE-2020-8018 — HIGH (8.4) — White Hats Nepal

Vulnerability Description

A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user This issue affects: SUSE Linux Enterprise Server 15 SP1 SLES15-SP1-CAP-Deployment-BYOS version 1.0.1 and prior versions; SLES15-SP1-CHOST-BYOS versions prior to 1.0.3 and prior versions;

CVSS Score

8.4

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Suse	Linux Enterprise Desktop	15

Related Weaknesses (CWE)

CWE-276

References

https://bugzilla.suse.com/show_bug.cgi?id=1163813Issue TrackingPermissions Required
https://bugzilla.suse.com/show_bug.cgi?id=1163813Issue TrackingPermissions Required

FAQ

What is CVE-2020-8018?

CVE-2020-8018 is a vulnerability with a CVSS score of 8.4 (HIGH). A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to ...

How severe is CVE-2020-8018?

CVE-2020-8018 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-8018?

Check the references section above for vendor advisories and patch information. Affected products include: Suse Linux Enterprise Desktop.