VYPR

Factory

by OpenSUSE

CVEs (3)

  • CVE-2019-3692HigJan 24, 2020
    risk 0.50cvss 7.7epss 0.01

    The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE…

  • CVE-2021-32000LowJul 28, 2021
    risk 0.21cvss 3.2epss 0.00

    A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue…

  • CVE-2011-1551Mar 30, 2011
    risk 0.00cvss epss 0.00

    SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local users to gain privileges by leveraging access to this account during root filesystem operations by the Cobbler daemon.