CVE-2020-8030 LOW

CVE-2020-8030: skuba: Insecure /tmp usage when joining node to cluster

Vendor Suse
Product SUSE CaaS Platform 4.5
Weakness CWE-377
Published February 11, 2021
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

3.6/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to arbitrary modifications of the machine/cluster.

Key dates

02Disclosure timeline

February 11, 2021 CVE published
September 16, 2024 Record updated