VDB
CVE-2022-21950
CVE-2022-21950
PUBLISHED
CVSS 7.800000190734863 HIGH
A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE Backports SLE-15-SP4 canna versions prior to 3.7p3-bp154.3.3.1. openSUSE Factory was also affected. Instead of fixing the package it was deleted there.
EPSS 0.15% · 4.1th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.15%
4.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| openSUSE | openSUSE Backports SLE-15-SP4 | canna |
| openSUSE | openSUSE Backports SLE-15-SP3 | * |
| opensuse | canna | 0, 0, 3.7p3 |
Timeline
- Aug 16, 2022 CVE Published
- Sep 8, 2022 EPSS Score
- Oct 23, 2022 EPSS Score
- Dec 8, 2022 EPSS Score
- Jan 22, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 9, 2023 EPSS Score
- Apr 23, 2023 EPSS Score
- Jun 8, 2023 EPSS Score
- Jul 23, 2023 EPSS Score
- Sep 7, 2023 EPSS Score
- Oct 22, 2023 EPSS Score