Description (CNA)
Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SUSE / Container suse/manager/5.0/x86_64/server:5.0.0-beta1.2.122 | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Enterprise Storage 7.1 | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP5 | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise Module for Web and Scripting 15 SP5 | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP5 | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP5 | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise High Performance Computing 15 SP6 | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise Module for Web and Scripting 15 SP6 | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP6 | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP6 | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP2-LTSS | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP3-LTSS | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise Server 15 SP4-LTSS | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP2 | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP3 | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Linux Enterprise Server for SAP Applications 15 SP4 | affected ? before 9.0.85-150200.57.1 |
| SUSE / SUSE Manager Server 4.3 | affected ? before 9.0.85-150200.57.1 |
| SUSE / openSUSE Leap 15.5 | affected ? before 9.0.85-150200.57.1 |
| SUSE / openSUSE Tumbleweed | affected ? before 9.0.85-3.1 |
CWE
CWE-732
References
ADP enrichment
No English description supplied.
No references supplied.