Vulnerability Details CVE-2019-18898
UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1. openSUSE Factory trousers versions prior to 0.3.14-7.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.9%
CVSS Severity
CVSS v3 Score 7.7
CVSS v2 Score 7.2
References
Products affected by CVE-2019-18898
-
cpe:2.3:a:suse:trousers:-
-
cpe:2.3:a:suse:trousers:0.3.14-6.3.1
-
cpe:2.3:o:opensuse:leap:15.1
-
cpe:2.3:o:suse:opensuse_factory:-
-
cpe:2.3:o:suse:suse_linux_enterprise_server:15