PT-2021-12706 · Suse · Suse Caas Platform 4.5

Johannes Segitz · Published 2021-02-11 · Updated 2021-02-19 · CVE-2020-8030

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: SUSE CaaS Platform 4.5

Description: A local attacker can exploit an Insecure Temporary File vulnerability in skuba to leak the bootstrapToken or modify the configuration file before it is processed. This can lead to arbitrary modifications of the machine or cluster.

Recommendations: For SUSE CaaS Platform 4.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-377

Related Identifiers

CVE-2020-8030

Affected Products

Suse Caas Platform 4.5

References · 5

• 🔥 https://bugzilla.suse.com/show_bug.cgi?id=1177361 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-8030 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8030 · Vendor Advisory
• https://t.me/cvenotify/9799 · Telegram Post
• https://t.me/cibsecurity/23438 · Telegram Post