← CVE Intelligence

CVE-2022-21944

watchman: chown in watchman@.socket unit allows symlink attack PUBLISHED

Description (CNA)

A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports SLE-15-SP3, Factory allows local attackers to escalate to root. This issue affects: openSUSE Backports SLE-15-SP3 watchman versions prior to 4.9.0. openSUSE Factory watchman versions prior to 4.9.0-9.1.

Affected (CNA)

Vendor / productVersions
openSUSE / openSUSE Backports SLE-15-SP3affected watchman before 4.9.0
openSUSE / Factoryaffected watchman before 4.9.0-9.1

CWE

CWE-59

References

ADP enrichment

CVE

No English description supplied.