Description
A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin to root. This issue affects: openSUSE Factory munin version 2.0.49-4.2 and prior versions. openSUSE Leap 15.1 munin version 2.0.40-lp151.1.1 and prior versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| openSUSE | Factory | munin – ≤ 2.0.49-4.2 | — |
| openSUSE | Leap 15.1 | munin – ≤ 2.0.40-lp151.1.1 | — |