CVE-2020-8029

A Incorrect Permission Assignment for Critical Resource vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to gain access to the kublet key. This issue affects: SUSE CaaS Platform 4.5 skuba versions prior to https://github.com/SUSE/skuba/pull/1416.

Score

CVSS 3.1 4.0 Medium

Status

Modified - meissner@suse.de

Published

2021-02-11

Last modified

2024-09-16

Weaknesses

CWE-732

Affected products

• Caas Platform (Suse)
• Suse Caas Platform 4.5 (Suse)

References

• https://bugzilla.suse.com/show_bug.cgi?id=1177362