CVEvulnerability
CVE-2020-8030
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-02-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.6 LOW — CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
- CVSS 3.1 ([email protected])
- 4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-377
Description
A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to arbitrary modifications of the machine/cluster.
Affected configurations
• suse caas platform 4.5
Related
Weakness · not in database (1)
References
- https://bugzilla.suse.com/show_bug.cgi?id=1177361 Exploit, Issue Tracking, Vendor Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1177361 Exploit, Issue Tracking, Vendor Advisory