CVE search · CVE-2023-32182
CVE-2023-32182
high 7.8
A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This issue affects SUSE Linux Enterprise Desktop 15 SP5: before 3.7.3-150500.3.5.1; SUSE Linux Enterprise High Performance Computing 15 SP5: before 3.7.3-150500.3.5.1; openSUSE Leap 15.5 : before 3.7.3-150500.3.5.1.
Details
- Status
- Modified
- Published
- Last changed
- Source
- meissner@suse.de
- Weakness
- CWE-59
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 5.9 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
meissner@suse.deSecondary |
| CVSS 3.1 | high 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- opensuse · leap
- suse · linux_enterprise_high_performance_computing
- suse · suse_linux_enterprise_desktop
References
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32182ExploitIssue Tracking
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32182ExploitIssue Tracking