CVE-2018-19638 Vulnerability Details

  /     /     /  

CVE-2018-19638 Metadata Quick Info

CVE Published: 05/03/2019 | CVE Updated: 17/09/2024 | CVE Year: 2018
Source: microfocus | Vendor: SUSE | Product: supportutils
Status : PUBLISHED

---

CVE-2018-19638 Description

In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-377
CWE Name: CWE-377
Source: SUSE

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).