CVE-2019-3691: Local privilege escalation from user munge to root
A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE Factory munge versions prior to 0.5.13-6.1.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-3691?
CVE-2019-3691 is a Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15 and openSUSE Factory.
What is the severity of CVE-2019-3691?
CVE-2019-3691 has a severity rating of 7.8, which is classified as high.
Which software versions are affected by CVE-2019-3691?
CVE-2019-3691 affects munge versions prior to 0.5.13-4.3.1 in SUSE Linux Enterprise Server 15 and munge versions prior to 0.5.13-6.1 in openSUSE Factory.
How can local attackers exploit CVE-2019-3691?
Local attackers can exploit CVE-2019-3691 to escalate privileges from user munge to root.
Is SUSE Linux Enterprise Server 15 vulnerable to CVE-2019-3691?
No, SUSE Linux Enterprise Server 15 is not vulnerable to CVE-2019-3691.