CVE-2022-31254
Fixed in a distro release EPSS <1%CVSS 7.8
A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap 15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-server versions prior to 2.10.
Products: SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1, openSUSE Leap 15.3, openSUSE Leap 15.4
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Enterprise Storage 6 | rmt-server | 2.10-150100.3.42.1 |
| SUSE Enterprise Storage 7 | rmt-server | 2.10-150200.3.29.1 |
| SUSE Enterprise Storage 7.1 | rmt-server | 2.10-150300.3.21.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | rmt-server | 2.10-150100.3.42.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | rmt-server | 2.10-150200.3.29.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | rmt-server | 2.10-150300.3.21.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | rmt-server | 2.10-150300.3.21.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | rmt-server | 2.10-150000.3.61.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | rmt-server | 2.10-150000.3.61.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 | rmt-server | 2.10-150100.3.42.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP2 | rmt-server | 2.10-150200.3.29.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP3 | rmt-server | 2.10-150300.3.21.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | rmt-server | 2.10-150400.3.9.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | rmt-server | 2.13-150500.3.3.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP3 | rmt-server | 2.10-150300.3.21.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP4 | rmt-server | 2.10-150400.3.9.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP5 | rmt-server | 2.13-150500.3.3.1 |
| SUSE Linux Enterprise Real Time 15 SP3 | rmt-server | 2.10-150300.3.21.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | rmt-server | 2.10-150100.3.42.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | rmt-server | 2.10-150100.3.42.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | rmt-server | 2.10-150200.3.29.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | rmt-server | 2.10-150200.3.29.1 |
| SUSE Linux Enterprise Server 15 SP3-BCL | rmt-server | 2.10-150300.3.21.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | rmt-server | 2.10-150300.3.21.1 |
| SUSE Linux Enterprise Server 15-LTSS | rmt-server | 2.10-150000.3.61.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | rmt-server | 2.10-150000.3.61.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | rmt-server | 2.10-150100.3.42.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | rmt-server | 2.10-150200.3.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | rmt-server | 2.10-150300.3.21.1 |
| SUSE Manager Proxy 4.1 | rmt-server | 2.10-150200.3.29.1 |
| SUSE Manager Proxy 4.2 | rmt-server | 2.10-150300.3.21.1 |
| SUSE Manager Retail Branch Server 4.1 | rmt-server | 2.10-150200.3.29.1 |
| SUSE Manager Retail Branch Server 4.2 | rmt-server | 2.10-150300.3.21.1 |
| SUSE Manager Server 4.1 | rmt-server | 2.10-150200.3.29.1 |
| SUSE Manager Server 4.2 | rmt-server | 2.10-150300.3.21.1 |
| openSUSE Leap 15.3 | rmt-server | 2.10-150300.3.21.1 |
| openSUSE Leap 15.4 | rmt-server | 2.10-150400.3.9.1 |
| openSUSE Leap 15.5 | rmt-server | 2.13-150500.3.3.1 |
| openSUSE Tumbleweed | rmt-server | 2.12-1.1 |