Skip to content
OpenAdvisories

Archive

3 March 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.4

    OS Command Injection in ansible

    A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take adv…

  • High 8.4

    pcp: Local privilege escalation from user pcp to root through migrate_tempdirs

    A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Develo…

  • High 8.4

    pcp: Local privilege escalation from user pcp to root

    A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE …