suse · CVE-2020-8029

Quick triage

Priority: medium Published: 2021-05-30 14:37:42 UTC Updated: 2025-08-14 01:45:21 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2020-8029 severity moderate: SUSE including 12 source package names (caasp-release-4.5.2-1.8.2, cri-o-1.18-1.18.4-4.3.2, …), 12 product×package rows across 1 product lines (SUSE CaaS Platform 4.5): Fixed 12.

Description:

A Incorrect Permission Assignment for Critical Resource vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to gain access to the kublet key. This issue affects: SUSE CaaS Platform 4.5 skuba versions prior to https://github.com/SUSE/skuba/pull/1416.

cvelogic Threat Intelligence