CVE-2021-25314
Description
A Creation of Temporary File With Insecure Permissions vulnerability in hawk2 of SUSE Linux Enterprise High Availability 12-SP3, SUSE Linux Enterprise High Availability 12-SP5, SUSE Linux Enterprise High Availability 15-SP2 allows local attackers to escalate to root. This issue affects: SUSE Linux Enterprise High Availability 12-SP3 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9. SUSE Linux Enterprise High Availability 12-SP5 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9. SUSE Linux Enterprise High Availability 15-SP2 hawk2 versions prior to 2.6.3+git.1614684118.af555ad9.
How to fix
- suse hawk22.6.3\+git.1614685906.812c31e9-2.42.1, 2.6.3\+git.1614684118.af555ad9, 2.6.3\+git.1614685906.812c31e9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| suse hawk2 | v < 2.6.3\+git.1614685906.812c31e9-2.42.1, v < 2.6.3\+git.1614684118.af555ad9, v < 2.6.3\+git.1614685906.812c31e9 | 2.6.3\+git.1614685906.812c31e9-2.42.1, 2.6.3\+git.1614684118.af555ad9, 2.6.3\+git.1614685906.812c31e9 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.