CVE-2019-18897: Local privilege escalation from user salt to root
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master version 2019.2.0-46.83.1 and prior versions. SUSE Linux Enterprise Server 15 salt-master version 2019.2.0-6.21.1 and prior versions. openSUSE Factory salt-master version 2019.2.2-3.1 and prior versions.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-18897?
CVE-2019-18897 is a UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, and openSUSE Factory that allows local attackers to escalate privileges from user salt to root.
Which software is affected by CVE-2019-18897?
CVE-2019-18897 affects SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, and openSUSE Factory.
What is the severity of CVE-2019-18897?
The severity of CVE-2019-18897 is high with a CVSS score of 7.8.
How can the attacker escalate privileges in CVE-2019-18897?
In CVE-2019-18897, a local attacker can escalate privileges from user salt to root.
How can I fix CVE-2019-18897?
To fix CVE-2019-18897, it is recommended to update the affected software to the latest version available.