CVE-2020-8030CWE-377

skuba: Insecure /tmp usage when joining node to cluster

Low · published February 11, 2021

CVSS v3.1
3.6
EPSS
0%
Percentile
15.4
In the wild
Unconfirmed
What it is

A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to arbitrary modifications of the machine/cluster.

The record
Technical detail
CVSS v3.1
3.6 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.4th percentile
Weakness
CWE-377 · Insecure Temporary File
Published
2021-02-11T16:00Z
EPSS history
Timeline
  • 11 FEB 16:00Z
    skuba: Insecure /tmp usage when joining node to cluster
    cvelistv5