CVE-2019-3697CWE-59

Local privilege escalation from user gnump3d to root

High · published January 24, 2020

CVSS v3.1
7.7
EPSS
1%
Percentile
43.2
In the wild
Unconfirmed
What it is

UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate from user gnump3d to root. This issue affects: openSUSE Leap 15.1 gnump3d version 3.0-lp151.2.1 and prior versions.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00518 · 43.2th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2020-01-24T12:10Z
EPSS history
Timeline
  • 24 JAN 12:10Z
    Local privilege escalation from user gnump3d to root
    cvelistv5