CVE-2019-19191: High severity shibboleth vulnerability
Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user (the shibd account) after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-19191?
CVE-2019-19191 is a vulnerability in the Shibboleth Service Provider (SP) 3.x before 3.1.0 that allows the user to escalate privileges to root.
How does CVE-2019-19191 occur?
CVE-2019-19191 occurs because the spec file in Shibboleth Service Provider (SP) 3.x before 3.1.0 calls chown on files in a directory controlled by the service user, allowing the user to create symlinks and escalate privileges.
What is the severity of CVE-2019-19191?
CVE-2019-19191 has a severity rating of high with a CVSS score of 7.8.
How do I fix CVE-2019-19191?
To fix CVE-2019-19191, it is recommended to upgrade to Shibboleth Service Provider (SP) version 3.1.0 or later.
Where can I find more information about CVE-2019-19191?
More information about CVE-2019-19191 can be found in the following references: - [OpenSUSE Security Announcement](http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00017.html) - [SUSE Bugzilla](https://bugzilla.suse.com/show_bug.cgi?id=1157471) - [Shibboleth Issue Tracker](https://issues.shibboleth.net/jira/browse/SSPCPP-874)