VULNERABILITY INTELLIGENCE
CVE-2020-8030
CVSS score3.6 LOW
EPSS probability0.25%
CISA KEVNot currently listed
Published2021-02-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Description
A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to arbitrary modifications of the machine/cluster.
Weakness classification
- meissner@suse.de: CWE-377
Primary references
- meissner@suse.de — Exploit, Issue Tracking, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Vendor Advisory