CVE-2019-3694 Local privilege escalation from munin to root in the packaging of munin

A Symbolic Link Symlink Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin to root. This issue affects: openSUSE Factory munin version 2.0.49-4.2 and prior versions. openSUSE Leap 15.1 munin version 2.0.40-lp151.1.1...

CVE-2019-3694

CVE-2019-3694 is a local privilege-escalation due to a Symbolic Link (Symlink) Following issue in the packaging of openSUSE Munin. Affected: openSUSE Factory Munin 2.0.49-4.2 and prior versions openSUSE Leap 15.1 Munin 2.0.40-lp151.1.1 and prior versionsRoot cause: vulnerable packaging workflow a...