CVE-2020-15397: High severity hylafax+ vulnerability
HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-15397?
CVE-2020-15397 is classified as a high severity vulnerability due to its potential to allow unprivileged users to execute arbitrary code.
How do I fix CVE-2020-15397?
To fix CVE-2020-15397, restrict write permissions on the affected directories to prevent unprivileged users from executing code.
What systems are affected by CVE-2020-15397?
CVE-2020-15397 affects HylaFAX+ versions up to and including 7.0.2 and HylaFAX Enterprise.
What type of vulnerability is CVE-2020-15397?
CVE-2020-15397 is a path traversal vulnerability that allows execution of binaries in writable directories.
Can unprivileged users exploit CVE-2020-15397?
Yes, unprivileged users can exploit CVE-2020-15397 to execute code due to insufficient permission restrictions on certain directories.