CVE-2023-32183 HIGH

CVE-2023-32183

Weakness CWE-276

Published July 7, 2023

Last update November 14, 2024

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root This issue affects openSUSE Tumbleweed.

Key dates

02Disclosure timeline

July 7, 2023 CVE published

November 14, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-32183 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/276.html

Related vulnerabilities

04Related CVE

CVE-2023-6457 File and Directory Permission Vulnerability in Hitachi Tuning Manager CVE-2024-13206 REVE Antivirus reveinstall default permission CVE-2017-3209 The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user CVE-2020-13541 CVE-2022-2366 Incorrect defaults can cause attackers to bypass rate limitations