Medium severity · published Oct 6, 2022
CVE-2022-31252
permissions: chkstat does not check for group-writable parent directories or target files in safeOpen()
4.4
CVSS
0.1%
EPSS
No
On KEV
Description
A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with access to a group what can write to a location included in the path to a privileged binary to influence path resolution. This issue affects: SUSE Linux Enterprise Server 12-SP5 permissions versions prior to 20170707. openSUSE Leap 15.3 permissions versions prior to 20200127. openSUSE Leap 15.4 permissions versions prior to 20201225. openSUSE Leap Micro 5.2 permissions versions prior to 20181225.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SL
SUSE Linux Enterprise Server 12-SP5 · SUSE
permissions before 20170707 · source: vendor
OL
openSUSE Leap 15.3 · openSUSE
permissions before 20200127 · source: vendor
OL
openSUSE Leap 15.4 · openSUSE
permissions before 20201225 · source: vendor
OL
openSUSE Leap Micro 5.2 · openSUSE
permissions before 20181225 · source: vendor
LE
Leap · Opensuse
15.3; 15.4 · source: NVD
LM
Leap Micro · Opensuse
5.2 · source: NVD
LE
Linux Enterprise Server · Suse
12 · source: NVD