CVE-2020-8025 | Vulnetix

CVE-2020-8025 PUBLISHED CVSS 6.099999904632568 MEDIUM

A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Tumbleweed sets the permissions for some of the directories of the pcp package to unintended settings. This issue affects: SUSE Linux Enterprise Server 12-SP4 permissions versions prior to 20170707-3.24.1. SUSE Linux Enterprise Server 15-LTSS permissions versions prior to 20180125-3.27.1. SUSE Linux Enterprise Server for SAP 15 permissions versions prior to 20180125-3.27.1. openSUSE Leap 15.1 permissions versions prior to 20181116-lp151.4.24.1. openSUSE Tumbleweed permissions versions prior to 20200624.

EPSS 0.47% · 41.1th percentile

Risk Scores

CVSS 3.1

6.099999904632568

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

EPSS Score

0.47%

41.1th percentile

Affected Products

Vendor	Product	Versions
SUSE	SUSE Linux Enterprise Server 15-LTSS	permissions
SUSE	SUSE Linux Enterprise Server 12-SP4	permissions
openSUSE	openSUSE Leap 15.1	*
openSUSE	openSUSE Tumbleweed	permissions
suse	linux_enterprise_high_performance_computing	15
suse	linux_enterprise_software_development_kit	12
SUSE	SUSE Linux Enterprise Server for SAP 15	permissions
suse	linux_enterprise_server	15

Timeline

Aug 7, 2020 CVE Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 26, 2021 EPSS Score
Oct 28, 2021 EPSS Score
Dec 31, 2021 EPSS Score
Mar 4, 2022 EPSS Score
Apr 1, 2022 EPSS Score
May 7, 2022 EPSS Score
Jul 9, 2022 EPSS Score
Sep 12, 2022 EPSS Score
Nov 14, 2022 EPSS Score

References

Open in Interactive Console →