Description (CNA)
In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SUSE / supportutils | affected unspecified before 3.1-5.7.1 |
CWE
CWE-377
References
- https://bugzilla.suse.com/show_bug.cgi?id=1118460
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html
ADP enrichment
No English description supplied.