Overview
- Description
- : Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform 3.0 libzypp versions prior to 16.21.2-27.68.1. SUSE Linux Enterprise Server 12 libzypp versions prior to 16.21.2-2.45.1. SUSE Linux Enterprise Server 15 17.19.0-3.34.1.
- Source
- meissner@suse.de
- NVD status
- Modified
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 3.3
- Impact score
- 1.4
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Severity
- LOW
CVSS 2.0
- Type
- Primary
- Base score
- 2.1
- Impact score
- 2.9
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:N/A:N
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:suse:caas_platform:3.0:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D5ABF09D-B887-4041-9168-5057B668F602"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:opensuse:libzypp:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "805EF031-0F25-472E-AE1A-008755BD5727",
"versionEndExcluding": "16.21.2-27.68.1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9C649194-B8C2-49F7-A819-C635EE584ABF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:opensuse:libzypp:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7A5700D-0E1B-432F-B50D-59C4AB297BDE",
"versionEndExcluding": "16.21.2-2.45.1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:suse:suse_linux_enterprise_server:15:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AF73A3D9-6566-4CBF-AA5F-5A4B99719A1D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:opensuse:libzypp:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E29CF9A9-8160-4DAA-9B87-D82385C11B23",
"versionEndExcluding": "17.19.0-3.34.1"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]