CVE-2020-8025
Description
A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Tumbleweed sets the permissions for some of the directories of the pcp package to unintended settings. This issue affects: SUSE Linux Enterprise Server 12-SP4 permissions versions prior to 20170707-3.24.1. SUSE Linux Enterprise Server 15-LTSS permissions versions prior to 20180125-3.27.1. SUSE Linux Enterprise Server for SAP 15 permissions versions prior to 20180125-3.27.1. openSUSE Leap 15.1 permissions versions prior to 20181116-lp151.4.24.1. openSUSE Tumbleweed permissions versions prior to 20200624.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21- openSUSE/openSUSE Leap 15.1v5Range: permissions
- openSUSE/openSUSE Tumbleweedv5Range: permissions
- osv-coords8 versionspkg:rpm/opensuse/pcp&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/pcp&distro=openSUSE%20Leap%2015.4pkg:rpm/suse/pcp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/permissions&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2pkg:rpm/suse/pcp&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/pcp&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/pcp&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/pcp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015
< 3.11.9-150000.5.14.1+ 7 more
- (no CPE)range: < 3.11.9-150000.5.14.1
- (no CPE)range: < 3.11.9-150000.5.14.1
- (no CPE)range: < 3.11.9-6.17.1
- (no CPE)range: < 20181224-23.3.1
- (no CPE)range: < 3.11.9-5.11.5
- (no CPE)range: < 3.11.9-5.11.5
- (no CPE)range: < 3.11.9-5.11.5
- (no CPE)range: < 3.11.9-5.11.5
- Range: <20170707-3.24.1, <20180125-3.27.1, <20181116-lp151.4.24.1, <20200624
permissions+ 4 more
- (no CPE)range: permissions
- (no CPE)range: permissions
- cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:ltss:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:15:sp1:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:*:*:*:*
- Range: permissions
cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15:*:*:*:espos:*:*:*+ 1 more
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15:*:*:*:espos:*:*:*
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15:*:*:*:ltss:*:*:*
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp4:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp4:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp5:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- bugzilla.suse.com/show_bug.cginvdExploitIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.