CVE-2020-8029CWE-732

skuba: Insecure handling of private key

Low · published February 11, 2021

CVSS v3.1
2.9
EPSS
0%
Percentile
20.5
In the wild
Unconfirmed
What it is

A Incorrect Permission Assignment for Critical Resource vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to gain access to the kublet key. This issue affects: SUSE CaaS Platform 4.5 skuba versions prior to https://github.com/SUSE/skuba/pull/1416.

The record
Technical detail
CVSS v3.1
2.9 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00291 · 20.5th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2021-02-11T16:00Z
EPSS history
Timeline
  • 11 FEB 16:00Z
    skuba: Insecure handling of private key
    cvelistv5