4.4
CVSSv2

CVE-2019-3696

Published: 03/03/2020 Updated: 24/03/2020
CVSS v2 Base Score: 4.4 | Impact Score: 6.4 | Exploitability Score: 3.4
CVSS v3 Base Score: 7.3 | Impact Score: 5.9 | Exploitability Score: 1.3
VMScore: 392
Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local user pcp to overwrite arbitrary files with arbitrary content. This issue affects: SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp versions before 3.11.9-5.8.1. SUSE Linux Enterprise High Performance Computing 15-LTSS pcp versions before 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15 pcp versions before 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15-SP1 pcp versions before 4.3.1-3.5.3. SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 pcp versions before 3.11.9-5.8.1. SUSE Linux Enterprise Server 15-LTSS pcp versions before 3.11.9-5.8.1. SUSE Linux Enterprise Server for SAP 15 pcp versions before 3.11.9-5.8.1. SUSE Linux Enterprise Software Development Kit 12-SP4 pcp versions before 3.11.9-6.14.1. SUSE Linux Enterprise Software Development Kit 12-SP5 pcp versions before 3.11.9-6.14.1. openSUSE Leap 15.1 pcp versions before 4.3.1-lp151.2.3.1.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

opensuse pcp

Vendor Advisories

A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1, SUSE Linux Enterprise Module for Open ...