Lucene search

SuseCVE-2023-32183

HistoryJul 07, 2023 - 9:15 a.m.

CVE-2023-32183

2023-07-0709:15:10

CWE-276

suse

web.nvd.nist.gov

cve-2023-32183

incorrect default permissions

opensuse tumbleweed

hawk2 package

vulnerability

hacluster

root escalation

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root
This issue affects openSUSE Tumbleweed.

Affected configurations

Nvd

Node

opensusetumbleweedMatch-

VendorProductVersionCPE
opensusetumbleweed-cpe:2.3:o:opensuse:tumbleweed:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opensuse	tumbleweed	-	cpe:2.3:o:opensuse:tumbleweed:-:::::::*

CNA Affected

[
  {
    "defaultStatus": "affected",
    "packageName": "hawk2",
    "product": "Tumbleweed",
    "vendor": "openSUSE",
    "versions": [
      {
        "status": "unaffected",
        "version": "2.6.4+git.1682509819.1ff135ea-269.5"
      }
    ]
  }
]

References

bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32183

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-32183