Auth bypass in Opensuse Leap
CVE-2022-31252
A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with access to a group what can write to a location included in the path to a privileged binary to influence path resolution. This issue affects: SUSE Linux Enterprise Server 12-SP5 permissions versions prior to 20170707. openSUSE Leap 15.3 permissions versions prior to 20200127. openSUSE Leap 15.4 permissions versions prior to 20201225. openSUSE Leap Micro 5.2 permissions versions prior to 20181225.
Vulnerability class: Broken Access Control
EPSS: 0.001 (4.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.
Affected products
- Opensuse Leap — versions 15.3, 15.4
- Opensuse Leap_micro — versions 5.2
- Opensuse Leap 15.3 — versions permissions
- Opensuse Leap 15.4 — versions permissions
- Opensuse Leap Micro 5.2 — versions permissions
- Suse Linux_enterprise_server — versions 12
- Suse Linux Enterprise Server 12-sp5 — versions permissions
Weakness classification (CWE)
Public proof-of-concept exploits
References
- meissner@suse.de (Issue Tracking, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-31252?
- CVE-2022-31252 is a medium-severity vulnerability in Opensuse Leap, classified under Incorrect Authorization. CVSS score: 4.4/10. Published 2022-10-06.
- How severe is CVE-2022-31252?
- Medium severity. CVSS v3 base score is 4.4 out of 10.
- Is CVE-2022-31252 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.