Lucene search

[email protected]NVD:CVE-2019-3698

HistoryFeb 28, 2020 - 2:15 p.m.

CVE-2019-3698

2020-02-2814:15:09

CWE-59

[email protected]

web.nvd.nist.gov

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

25.6%

JSON

UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winning a race. This issue affects: SUSE Linux Enterprise Server 12 nagios version 3.5.1-5.27 and prior versions. SUSE Linux Enterprise Server 11 nagios version 3.0.6-1.25.36.3.1 and prior versions. openSUSE Factory nagios version 4.4.5-2.1 and prior versions.

Affected configurations

Nvd

Node

nagiosnagiosRange<3.5.1

AND

suselinux_enterprise_serverMatch12-

Node

nagiosnagiosRange<3.0.6

AND

suselinux_enterprise_serverMatch11-

Node

opensusebackports_sleMatch15.0sp1

opensuseleapMatch15.1

VendorProductVersionCPE
nagiosnagios*cpe:2.3:a:nagios:nagios:*:*:*:*:*:*:*:*
suselinux_enterprise_server12cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*
suselinux_enterprise_server11cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*
opensusebackports_sle15.0cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
opensuseleap15.1cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nagios	nagios	*	cpe:2.3:a:nagios:nagios::::::::
suse	linux_enterprise_server	12	cpe:2.3:o:suse:linux_enterprise_server:12:-::::::
suse	linux_enterprise_server	11	cpe:2.3:o:suse:linux_enterprise_server:11:-::::::
opensuse	backports_sle	15.0	cpe:2.3:a:opensuse:backports_sle:15.0:sp1::::::
opensuse	leap	15.1	cpe:2.3:o:opensuse:leap:15.1:::::::*