CVE-2020-8030

skuba: Insecure /tmp usage when joining node to cluster

State: Published
Severity: 3.6 Low
Published: Feb 11, 2021
Updated: Sep 16, 2024
Reserved: Jan 27, 2020

Description

A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to arbitrary modifications of the machine/cluster.

Scores

CVSS	Score	Vector	Source
3.1	3.6 Low	CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N	suse

Weaknesses

CWE-377 Insecure Temporary File

Affected Products

Product	Versions
SUSE CaaS Platform 4.5SUSE	suba to before 2.1.7Affected

References

https://bugzilla.suse.com/show_bug.cgi?id=1177361

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.