User-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviliges (SUSE SUSE Enterprise Storage 5)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.86 % · percentile 58 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- suse
- NVD status
- Modified
Description
A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8 allows local attackers to escalate from group tomcat to root. This issue affects: SUSE Enterprise Storage 5 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP2-BCL tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP2-LTSS tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP3-BCL tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP3-LTSS tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP4 tomcat versions prior to 9.0.35-3.39.1. SUSE Linux Enterprise Server 12-SP5 tomcat versions prior to 9.0.35-3.39.1. SUSE Linux Enterprise Server 15-LTSS tomcat versions prior to 9.0.35-3.57.3. SUSE Linux Enterprise Server for SAP 12-SP2 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server for SAP 12-SP3 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server for SAP 15 tomcat versions prior to 9.0.35-3.57.3. SUSE OpenStack Cloud 7 tomcat versions prior to 8.0.53-29.32.1. SUSE OpenStack Cloud 8 tomcat versions prior to 8.0.53-29.32.1. SUSE OpenStack Cloud Crowbar 8 tomcat versions prior to 8.0.53-29.32.1.
Weaknesses (CWE)
- CWE-276 — Incorrect Default Permissions
References
- https://bugzilla.suse.com/show_bug.cgi?id=1172405
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00066.html
- https://lists.apache.org/thread.html/rf50d02409e5732c4ee37f19a193af171251a25a652599ce3c2bc69e7%40%3Cusers.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/ra87ec20a0f4b226c81c7eed27e5d7433ccdc41e61a8da408a45f0fa1%40%3Cusers.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r5be80ba868a11a1f64e4922399f171b8619bca4bc2039f79cf913928%40%3Cjava-dev.axis.apache.org%3E
- https://lists.apache.org/thread.html/r393d4f431683e99c839b4aed68f720b8583bca6c35cd84adccaa02be%40%3Cjava-dev.axis.apache.org%3E
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.7 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | suse |
| CVSS 3.1 | HIGH 7.7 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | NVD · meissner@suse.de (Secondary) |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | HIGH 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C | NVD · nvd@nist.gov (Primary) |
Advisories
- GHSA-gc58-v8h3-x2gr — Incorrect Default Permissions in Apache Tomcat
European references
- ENISA EUVD · EUVD-2022-1008
- GCVE · GCVE-0-2020-8022
CERT-FR advisories
- CERTFR-2025-AVI-0370 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
- CERTFR-2022-AVI-568 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
- CERTFR-2022-AVI-386 — Multiples vulnérabilités dans IBM QRadar SIEM · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*< 8.0.53-29.32.1cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*< 8.0.53-29.32.1cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*< 8.0.53-29.32.1cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*< 8.0.53-29.32.1cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*< 8.0.53-29.32.1cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*< 8.0.53-29.32.1cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*< 8.0.53-29.32.1cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*< 8.0.53-29.32.1cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*< 8.0.53-29.32.1cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*< 8.0.53-29.32.1cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*< 9.0.35-3.39.1cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*< 9.0.35-3.39.1cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*< 9.0.35-3.57.3cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
Affected products
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |