Skip to content
OpenAdvisories

Product · SUSE

SUSE Openstack Cloud 8

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.7
    CVE-2020-8023

    Local privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2

    A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enterprise Storage 5, SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Point of Sale 11-SP3…

    SUSE openSUSE openSUSE Leap 15.1 SUSE Linux Enterprise Server for SAP 15 Linux
  • High 7.7
    CVE-2020-8022

    User-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviliges

    A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-…

    SUSE SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 12-SP5 Linux
  • High 8.8
    CVE-2019-3683

    keystone_json_assignment backend granted access to any project for users in user-project-map.json

    The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full "member" role access to every project. This allowed these user…

    SUSE SUSE Openstack Cloud 8