susemanager installer creates world-readable swap files
CVE-2019-3684

4MEDIUM

Key Information:

Vendor

Suse
Status
Suse Manager
Uyuni
Vendor
CVE Published:
13 May 2019

What is CVE-2019-3684?

SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem

Affected Version(s)

SUSE Manager < 4.0.7

Uyuni < 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade

References

https://bugzilla.suse.com/show_bug.cgi?id=1131954
x_refsource_MISC

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Malte Kraus from SUSE
.