CVE-2023-32183
HIGHOpensuse Tumbleweed - Incorrect Default Permissions
Title source: ruleDescription
Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root This issue affects openSUSE Tumbleweed.
Scores
CVSS v3
7.8
EPSS
0.0006
EPSS Percentile
18.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-276
Status
published
Affected Products (1)
opensuse/tumbleweed
Timeline
Published
Jul 07, 2023
Tracked Since
Feb 18, 2026