Low severity · published Jan 24, 2020
CVE-2019-18900
: Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to…
3.3
CVSS
0.3%
EPSS
No
On KEV
Description
: Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform 3.0 libzypp versions prior to 16.21.2-27.68.1. SUSE Linux Enterprise Server 12 libzypp versions prior to 16.21.2-2.45.1. SUSE Linux Enterprise Server 15 17.19.0-3.34.1.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libzypp · Opensuse
before 16.21.2-27.68.1; before 16.21.2-2.45.1; before 17.19.0-3.34.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-18900
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-18900
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00036.html
Issue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=1158763
lists.debian.org
https://lists.debian.org/debian-lts-announce/2020/03/msg00005.html
More from Libzypp
9.8
CVE-2017-9269
In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious repository mirrors to silently downgrade to unsigned repositories…
8.8
CVE-2026-44941
libzypp path traversal via "keyhint" in repomd.xml
8.8
CVE-2026-25707
Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp
8.1
CVE-2017-7436
In libzypp before 20170803 it was possible to retrieve unsigned packages without a warning to the user which could lead to man in the middle or malicious servers to inject…
8.1
CVE-2017-7435
In libzypp before 20170803 it was possible to add unsigned YUM repositories without warning to the user that could lead to man in the middle or malicious servers to inject…