What is CVE-2020-8024?

CVE-2020-8024 is a medium-severity vulnerability in Opensuse Factory, classified under Incorrect Default Permissions. CVSS score: 5.3/10. Published 2020-06-29.

How severe is CVE-2020-8024?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Opensuse Factory

CVE-2020-8024

A Incorrect Default Permissions vulnerability in the packaging of hylafax+ of openSUSE Leap 15.2, openSUSE Leap 15.1, openSUSE Factory allows local attackers to escalate from user uucp to users calling hylafax binaries. This issue affects…

EPSS: 0.002 (36.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L.

Affected products

Opensuse Factory — versions hylafax+
Opensuse Leap 15.1 — versions hylafax+
Opensuse Leap 15.2 — versions hylafax+

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

bugzilla.suse.com/show_bug.cgi (x_refsource_CONFIRM)
openSUSE-SU-2020:0958 (vendor-advisory, x_refsource_SUSE)

Frequently asked questions

What is CVE-2020-8024?: CVE-2020-8024 is a medium-severity vulnerability in Opensuse Factory, classified under Incorrect Default Permissions. CVSS score: 5.3/10. Published 2020-06-29.
How severe is CVE-2020-8024?: Medium severity. CVSS v3 base score is 5.3 out of 10.