VDB
CVE-2022-31250
CVE-2022-31250
PUBLISHED
CVSS 7.099999904632568 HIGH
A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime user to root. This issue affects: openSUSE Tumbleweed keylime versions prior to 6.4.2-1.1.
EPSS 0.32% · 25.2th percentile
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.32%
25.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| openSUSE | Tumbleweed | keylime |
| opensuse | tumbleweed | 0 |
Timeline
- Jul 20, 2022 EPSS Score
- Jul 20, 2022 CVE Published
- Sep 6, 2022 EPSS Score
- Oct 23, 2022 EPSS Score
- Dec 10, 2022 EPSS Score
- Jan 27, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 15, 2023 EPSS Score
- May 2, 2023 EPSS Score
- Jun 19, 2023 EPSS Score
- Aug 6, 2023 EPSS Score
- Sep 22, 2023 EPSS Score