CVEvulnerability

CVE-2018-19638

4.7 MEDIUM Published 2019-03-05 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2019-03-05
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 2.2 LOW — CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS 3.0 ([email protected]): 4.7 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected]): 3.3 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:P
Weaknesses: CWE-377, CWE-59

Description

In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.

Affected configurations

• opensuse supportutils (< 3.1-5.7.1)

Weakness · not in database (1)

CWE-377

Weakness · CWE (1)

CWE-59 Improper Link Resolution Before File Access weakness

References