CVE-2019-3684 - susemanager installer creates world-readable swap files

Back Back to CVE browser

MEDIUM

susemanager installer creates world-readable swap files

Published May 13, 2019

5.9

MEDIUM

CVSS 3.1

EPSS 0.71%

Description

SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem

Affected products

Vendor SUSE Product SUSE Manager Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <4.0.7
Vendor Uyuni Product Uyuni Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SUSE

SUSE Manager

n/a

Version	Status	Constraints
unspecified	affected	<4.0.7

Uyuni

n/a

Version	Status	Constraints
unspecified	affected

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-922

References (1)

https://bugzilla.suse.com/show_bug.cgi?id=1131954
x_refsource_MISCExploitIssue TrackingVendor Advisory

Link	Providers	Tags
https://bugzilla.suse.com/show_bug.cgi?id=1131954		x_refsource_MISCExploitIssue TrackingVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner suse

Published May 13, 2019

Updated Sep 17, 2024

Reserved Jan 3, 2019

Link CVE-2019-3684

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-3684

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-3684