VULNERABILITY INTELLIGENCE

CVE-2020-8032

CVSS score6.7 MEDIUM

EPSS probability0.35%

CISA KEVNot currently listed

Published2021-02-25

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions.

Weakness classification

CWE-377: Insecure Temporary File

Primary references

meissner@suse.de — Exploit, Issue Tracking, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Vendor Advisory