← CVE Intelligence

CVE-2022-31250

keylime %post scriplet allows for privilege escalation from keylime user to root PUBLISHED

Description (CNA)

A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime user to root. This issue affects: openSUSE Tumbleweed keylime versions prior to 6.4.2-1.1.

Affected (CNA)

Vendor / productVersions
openSUSE / Tumbleweedaffected keylime before 6.4.2-1.1

CWE

CWE-59

References

ADP enrichment

CVE

No English description supplied.