VDB
CVE-2020-8015
CVE-2020-8015
PUBLISHED
CVSS 8.399999618530273 HIGH
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1.
EPSS 0.53% · 42.6th percentile
Risk Scores
CVSS 3.1
8.399999618530273
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.53%
42.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| openSUSE | Factory | exim |
| exim | exim | 0 |
Timeline
- Apr 2, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Oct 27, 2021 EPSS Score
- Dec 29, 2021 EPSS Score
- Mar 3, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 5, 2022 EPSS Score
- Jul 7, 2022 EPSS Score
- Sep 9, 2022 EPSS Score
- Nov 11, 2022 EPSS Score
References
- openSUSE-SU-2020:0491 vendor-advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1154183 url
- https://nvd.nist.gov/vuln/detail/CVE-2020-8015 advisory