VDB

CVE-2022-21944

CVE-2022-21944 PUBLISHED CVSS 7.800000190734863 HIGH

A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports SLE-15-SP3, Factory allows local attackers to escalate to root. This issue affects: openSUSE Backports SLE-15-SP3 watchman versions prior to 4.9.0. openSUSE Factory watchman versions prior to 4.9.0-9.1.

EPSS 0.11% · 29.1th percentile

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.11%
29.1th percentile

Affected Products

VendorProductVersions
openSUSEopenSUSE Backports SLE-15-SP3watchman
opensusefactory_watchman0
openSUSEFactorywatchman

Timeline

  • Jan 17, 2022 CVE Published
  • Feb 8, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 24, 2022 EPSS Score
  • Jul 16, 2022 EPSS Score
  • Sep 7, 2022 EPSS Score
  • Oct 29, 2022 EPSS Score
  • Dec 21, 2022 EPSS Score
  • Feb 11, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 5, 2023 EPSS Score
  • May 27, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›