Vulnetix
Try Vulnetix Request Demo
CVE-2019-18900 PUBLISHED

: Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform 3.0 libzypp versions prior to 16.21.2-27.68.1. SUSE Linux Enterprise Server 12 libzypp versions prior to 16.21.2-2.45.1. SUSE Linux Enterprise Server 15 17.19.0-3.34.1.

EPSS 0.10% · 27.0th percentile

Risk Scores

EPSS Score
0.10%
27.0th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTSlibzypp17.25.7-2, 17.25.7-2ubuntu1, 17.25.7-2.1ubuntu0.22.04.1
Ubuntu:25.10libzypp17.36.7-1, 0, 17.36.7-1build1
Ubuntu:20.04:LTSlibzypp17.7.0-1, 0
Ubuntu:16.04:LTSlibzypp0, 15.3.0-1build1
Ubuntu:24.04:LTSlibzypp17.31.28-1, 17.31.29-1, 17.31.31-1

Timeline

References

Open in Interactive Console →