Improper Privilege Management in HylaFAX - CVE-2020-15397

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU32880

Improper Privilege Management in HylaFAX - CVE-2020-15397

Published: July 29, 2020 / Updated: August 5, 2020


Vulnerability identifier: #VU32880
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-15397
CWE-ID: CWE-269
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).


Affected software

HylaFAX
Gentoo Linux
Fedora
SUSE Linux
Opensuse
hylafaxplus (Alpine package)
hylafax+

How to mitigate CVE-2020-15397

Install updates from vendor's website.

HylaFAX - update to 7.0.3
hylafaxplus (Alpine package) - update to 7.0.0-r1
hylafax+ - addressed in versions 7.0.3-1.el6, 7.0.3-1.el7, 7.0.3-1.fc31, 7.0.3-1.fc32

External References

Related Security Bulletins