rpm package
suse/storeBackup&distro=SUSE Package Hub 15
pkg:rpm/suse/storeBackup&distro=SUSE%20Package%20Hub%2015
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-7040 | Hig | 8.1 | < 3.5-bp151.4.3.1 | 3.5-bp151.4.3.1 | Jan 21, 2020 | storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. (Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manual |
- affected < 3.5-bp151.4.3.1fixed 3.5-bp151.4.3.1
storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. (Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manual