VDB
CVE-2022-31254
CVE-2022-31254
PUBLISHED
CVSS 7.800000190734863 HIGH
A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-server versions prior to 2.10.
EPSS 0.25% · 15.1th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.25%
15.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SUSE | SUSE Linux Enterprise Server for SAP 15 | rmt-server |
| SUSE | SUSE Linux Enterprise Server for SAP 15-SP1 | rmt-server |
| opensuse | rmt-server | 0 |
| openSUSE | openSUSE Leap 15.3 | rmt-server |
| openSUSE | openSUSE Leap 15.4 | rmt-server |
| SUSE | SUSE Manager Server 4.1 | * |
Timeline
- Jan 3, 2023 CVE Published
- Feb 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 20, 2023 EPSS Score
- Apr 30, 2023 EPSS Score
- Jun 9, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Aug 29, 2023 EPSS Score
- Oct 8, 2023 EPSS Score
- Nov 18, 2023 EPSS Score
- Dec 28, 2023 EPSS Score
- Feb 6, 2024 EPSS Score