CVE-2019-3684 MEDIUM

CVE-2019-3684: susemanager installer creates world-readable swap files

Vendor Suse
Product SUSE Manager
Weakness CWE-922
Published May 13, 2019
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

4.0/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem

Key dates

02Disclosure timeline

May 13, 2019 CVE published
September 17, 2024 Record updated