CVE-2020-8024

MEDIUM

openSUSE Leap <15.2, 15.1 & Factory - Privilege Escalation

Title source: llm

Description

A Incorrect Default Permissions vulnerability in the packaging of hylafax+ of openSUSE Leap 15.2, openSUSE Leap 15.1, openSUSE Factory allows local attackers to escalate from user uucp to users calling hylafax binaries. This issue affects: openSUSE Leap 15.2 hylafax+ versions prior to 7.0.2-lp152.2.1. openSUSE Leap 15.1 hylafax+ version 5.6.1-lp151.3.7 and prior versions. openSUSE Factory hylafax+ versions prior to 7.0.2-2.1.

References (2)

Core 2

Core References

Issue Tracking, Vendor Advisory x_refsource_confirm

https://bugzilla.suse.com/show_bug.cgi?id=1172731

Mailing List, Patch, Vendor Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00022.html

Scores

CVSS v3 5.3

EPSS 0.0015

EPSS Percentile 35.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Details

CWE

CWE-276

Status published

Products (1)

opensuse/hylafax\+ < 7.0.2-lp152.2.1

Published Jun 29, 2020

Tracked Since Feb 18, 2026