CVE-2023-32183: High severity opensuse tumbleweed vulnerability
Published Jul 7, 2023
·Updated
Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root This issue affects openSUSE Tumbleweed.
Affected Software
1 affected component
openSUSE Tumbleweed
Event History
Jul 7, 2023
CVE Published
via MITRE·08:11 AM
Data Sourced
via MITRE·08:11 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-32183?
CVE-2023-32183 is an Incorrect Default Permissions vulnerability found in the openSUSE Tumbleweed hawk2 package.
2
Who is affected by CVE-2023-32183?
Users of openSUSE Tumbleweed with access to the hacluster group are affected by CVE-2023-32183.
3
What is the severity of CVE-2023-32183?
The severity of CVE-2023-32183 is rated as high with a CVSS score of 7.8.
4
How can an attacker exploit CVE-2023-32183?
By exploiting the Incorrect Default Permissions vulnerability, an attacker with access to the hacluster group can escalate privileges to root.
5
Is there a patch or fix available for CVE-2023-32183?
Yes, it is recommended to update the openSUSE Tumbleweed hawk2 package to the latest version, which includes the fix for CVE-2023-32183.