6.6высокая

BDU:2020-03225 (CVE-2020-8022)

Уязвимость компонента /usr/lib/tmpfiles.d/tomcat.conf пакета Tomcat операционной системы SUSE Linux Enterprise, позволяющая нарушителю повысить свои привилегии

Опубликовано: 2020-07-09

Уязвимость компонента /usr/lib/tmpfiles.d/tomcat.conf пакета Tomcat операционной системы SUSE Linux Enterprise связана с ошибками использования стандартных разрешений. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

SUSE Linux Enterprise Server for SAP Applications (12 SP2-BCL)SUSE Linux Enterprise Server for SAP Applications (12 SP2-ESPOS)SUSE Linux Enterprise Server for SAP Applications (12 SP2-LTSS)SUSE Linux Enterprise Server for SAP Applications (12 SP4)SUSE OpenStack Cloud (7)Suse Linux Enterprise Server (12 SP4)SUSE Enterprise Storage (5)SUSE Linux Enterprise Point of Sale (12 SP2-CLIENT)Suse Linux Enterprise Server (12 SP2-BCL)Suse Linux Enterprise Server (12 SP2-ESPOS)SUSE Linux Enterprise Module for Open Buildservice Development Tools (15 SP1)OpenSUSE Leap (15.1)SUSE Linux Enterprise Server for SAP Applications (15)Suse Linux Enterprise Server (12 SP2-LTSS)Suse Linux Enterprise Server (12 SP3-LTSS)SUSE OpenStack Cloud (8)Suse Linux Enterprise Server (12 SP3-BCL)Suse Linux Enterprise Server (12 SP5)SUSE Linux Enterprise Server for SAP Applications (12 SP3-BCL)SUSE Linux Enterprise Server for SAP Applications (12 SP3-LTSS)SUSE Linux Enterprise Server for SAP Applications (12 SP5)SUSE Linux Enterprise Module for Web Scripting (15 SP1)SUSE OpenStack Cloud (Crowbar 8)HPE Helion Openstack (8)Suse Linux Enterprise Server (12 SP3-ESPOS)SUSE Linux Enterprise Server for SAP Applications (12 SP3-ESPOS)SUSE Linux Enterprise High Performance Computing (15-ESPOS)SUSE Linux Enterprise High Performance Computing (15-LTSS)Suse Linux Enterprise Server (15-LTSS)

Использование рекомендаций:
https://www.suse.com/security/cve/CVE-2020-8022/