Vulnerabilities > CVE-2020-8027 - Insecure Temporary File vulnerability in Opensuse Openldap2

047910
CVSS 6.6 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
HIGH
local
low complexity
opensuse
CWE-377
NVD
Published: 2021-02-11
Updated: 2021-02-23

Summary

A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.37.1. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.37.1. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.18.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.9.1.

Vulnerable Configurations

Part Description Count
Application
Opensuse
5
OS
Suse
2
OS
Opensuse
2

Common Weakness Enumeration (CWE)

References