VulnerabilityModified
CVE-2019-3687
The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic.
LOW 3.3EPSS 0.27%
Does this matter?
Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.
Description
The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119aa.
- CVSS 3.1
- 3.3 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.27% probability · 20th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-276
- Affected
- suse/linux enterprise server
- Source
- meissner@suse.de
References
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html
- https://bugzilla.suse.com/show_bug.cgi?id=1148788Issue Tracking, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html
- https://bugzilla.suse.com/show_bug.cgi?id=1148788Issue Tracking, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.