VULNERABILITY INTELLIGENCE
CVE-2015-0794
CVSS score3.6 LOW
EPSS probability0.35%
CISA KEVNot currently listed
Published2015-11-19
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:P
Description
modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact via a symlink attack on /tmp/dracut_block_uuid.map.
Weakness classification
- CWE-59: Improper Link Resolution Before File Access ('Link Following')