CVE-2019-3699CWE-59

Local privilege escalation from user privoxy to root

High · published January 24, 2020

CVSS v3.1
7.7
EPSS
0%
Percentile
34.1
In the wild
Unconfirmed
What it is

UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root. This issue affects: openSUSE Leap 15.1 privoxy version 3.0.28-lp151.1.1 and prior versions. openSUSE Factory privoxy version 3.0.28-2.1 and prior versions.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00409 · 34.1th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2020-01-24T12:25Z
EPSS history
Timeline
  • 24 JAN 12:25Z
    Local privilege escalation from user privoxy to root
    cvelistv5