VULNERABILITY INTELLIGENCE

CVE-2019-3684

CVSS score5.9 MEDIUM

EPSS probability0.71%

CISA KEVNot currently listed

Published2019-05-13

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem

Weakness classification

meissner@suse.de: CWE-922
nvd@nist.gov: CWE-922

Primary references

meissner@suse.de — Exploit, Issue Tracking, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Vendor Advisory