CVE-2020-8014CWE-61

kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage

High · published June 29, 2020

CVSS v3.1
7.7
EPSS
0%
Percentile
41.7
In the wild
Unconfirmed
What it is

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1, openSUSE Tumbleweed allowed local attackers with the privileges of the kopano user to escalate to root. This issue affects: openSUSE Leap 15.1 kopano-spamd versions prior to 10.0.5-lp151.4.1. openSUSE Tumbleweed kopano-spamd versions prior to 10.0.5-1.1.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00497 · 41.7th percentile
Weakness
CWE-61 · UNIX Symbolic Link (Symlink) Following
Published
2020-06-29T12:00Z
EPSS history
Timeline
  • 29 JUN 12:00Z
    kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage
    cvelistv5