Vulnerability Details CVE-2022-31254
A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-server versions prior to 2.10.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.2%
CVSS Severity
CVSS v3 Score 7.8
References
Products affected by CVE-2022-31254
-
cpe:2.3:a:opensuse:rmt-server:-
-
cpe:2.3:a:opensuse:rmt-server:2.5.2-3.26.1
-
cpe:2.3:a:opensuse:rmt-server:2.5.2-3.9.1
-
cpe:2.3:a:opensuse:rmt-server:2.5.2-lp151.2.9.1
-
cpe:2.3:a:suse:manager_server:4.1
-
cpe:2.3:o:opensuse:leap:15.3
-
cpe:2.3:o:opensuse:leap:15.4
-
cpe:2.3:o:suse:linux_enterprise_server:15