CVE-2020-8026CWE-276

inn: non-root owned files

High · published August 7, 2020

CVSS v3.1
8.4
EPSS
0%
Percentile
28.9
In the wild
Unconfirmed
What it is

A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new user to escalate their privileges to root. This issue affects: openSUSE Leap 15.2 inn version 2.6.2-lp152.1.26 and prior versions. openSUSE Tumbleweed inn version 2.6.2-4.2 and prior versions. openSUSE Leap 15.1 inn version 2.5.4-lp151.3.3.1 and prior versions.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00362 · 28.9th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2020-08-07T09:25Z
EPSS history
Timeline
  • 07 AUG 09:25Z
    inn: non-root owned files
    cvelistv5