Vulnerability Details CVE-2019-3699
UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root. This issue affects: openSUSE Leap 15.1 privoxy version 3.0.28-lp151.1.1 and prior versions. openSUSE Factory privoxy version 3.0.28-2.1 and prior versions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.1%
CVSS Severity
CVSS v3 Score 7.7
CVSS v2 Score 7.2
Products affected by CVE-2019-3699
-
cpe:2.3:a:opensuse:factory:-
-
cpe:2.3:a:privoxy:privoxy:2.9.20
-
cpe:2.3:a:privoxy:privoxy:3.0.0
-
cpe:2.3:a:privoxy:privoxy:3.0.10
-
cpe:2.3:a:privoxy:privoxy:3.0.11
-
cpe:2.3:a:privoxy:privoxy:3.0.12
-
cpe:2.3:a:privoxy:privoxy:3.0.13
-
cpe:2.3:a:privoxy:privoxy:3.0.14
-
cpe:2.3:a:privoxy:privoxy:3.0.15
-
cpe:2.3:a:privoxy:privoxy:3.0.16
-
cpe:2.3:a:privoxy:privoxy:3.0.17
-
cpe:2.3:a:privoxy:privoxy:3.0.18
-
cpe:2.3:a:privoxy:privoxy:3.0.19
-
cpe:2.3:a:privoxy:privoxy:3.0.2
-
cpe:2.3:a:privoxy:privoxy:3.0.20
-
cpe:2.3:a:privoxy:privoxy:3.0.21
-
cpe:2.3:a:privoxy:privoxy:3.0.22
-
cpe:2.3:a:privoxy:privoxy:3.0.23
-
cpe:2.3:a:privoxy:privoxy:3.0.24
-
cpe:2.3:a:privoxy:privoxy:3.0.25
-
cpe:2.3:a:privoxy:privoxy:3.0.26
-
cpe:2.3:a:privoxy:privoxy:3.0.28
-
cpe:2.3:a:privoxy:privoxy:3.0.28-2.1
-
cpe:2.3:a:privoxy:privoxy:3.0.3
-
cpe:2.3:a:privoxy:privoxy:3.0.5
-
cpe:2.3:a:privoxy:privoxy:3.0.6
-
cpe:2.3:a:privoxy:privoxy:3.0.7
-
cpe:2.3:a:privoxy:privoxy:3.0.8
-
cpe:2.3:a:privoxy:privoxy:3.0.9
-
cpe:2.3:o:opensuse:leap:15.1