← CVE Intelligence

CVE-2022-31251

slurm: %post for slurm-testsuite operates as root in user owned directory PUBLISHED

Description (CNA)

A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3.

Affected (CNA)

Vendor / productVersions
SUSE / openSUSE Factoryaffected slurm before 22.05.2-3.3

CWE

CWE-276

References

ADP enrichment

CVE

No English description supplied.