CVE-2020-8026: inn: non-root owned files
A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new user to escalate their privileges to root. This issue affects: openSUSE Leap 15.2 inn version 2.6.2-lp152.1.26 and prior versions. openSUSE Tumbleweed inn version 2.6.2-4.2 and prior versions. openSUSE Leap 15.1 inn version 2.5.4-lp151.3.3.1 and prior versions.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-8026?
CVE-2020-8026 is a vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 that allows local attackers with control of the new user to escalate their privileges to root.
Which software versions are affected by CVE-2020-8026?
CVE-2020-8026 affects openSUSE Leap 15.2 inn version 2.6.2-lp152.1.26 and prior, openSUSE Tumbleweed inn version up to 2.6.2-4.2, openSUSE Leap 15.1.
What is the severity rating of CVE-2020-8026?
CVE-2020-8026 has a severity rating of 7.8 (high).
How can an attacker exploit CVE-2020-8026?
An attacker with control of the new user can exploit CVE-2020-8026 to escalate their privileges to root.
Are there any references for more information about CVE-2020-8026?
Yes, you can find more information about CVE-2020-8026 at the following references: [Reference 1](http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00063.html), [Reference 2](http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00064.html), [Reference 3](http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00074.html).