What is CVE-2020-15850?

CVE-2020-15850 is a high-severity vulnerability in Linux Linux_kernel, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2020-09-24.

How severe is CVE-2020-15850?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Linux Linux_kernel

CVE-2020-15850

Insecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on Linux allow local users to access the Nakivo Director web interface and gain root privileges. This occurs because the database containing the users of the…

EPSS: 0.005 (40.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux Linux_kernel
Nakivo Backup_\&_replication_director — versions 9.4.0.r43656
N/a — versions n/a

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (x_refsource_MISC, Release Notes, Vendor Advisory)

Frequently asked questions

What is CVE-2020-15850?: CVE-2020-15850 is a high-severity vulnerability in Linux Linux_kernel, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2020-09-24.
How severe is CVE-2020-15850?: High severity. CVSS v3 base score is 7.8 out of 10.