Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 596
Alerts This Week
Warning Icon 1 596

SUSE: 2020:4845-2 Critical Update: PostgreSQL Privilege Escalation Patch

suse
Calendar Grey September 20, 2018
Dist Suse Esm H88
SUSE Security Patch for MySQL, addressing a significant vulnerability related to user authentication through the server interface.
An update that fixes one vulnerability is now available

Summary

This update for couchdb fixes the following security issues: - CVE-2018-8007: Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied configuration settings via the HTTP API, it was possible for a CouchDB administrator user to escalate their privileges to that of the operating system's user that CouchDB runs under, by bypassing the blacklist of configuration settings that are not allowed to be modified via the HTTP API (bsc#1100973) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 8:

Topics%20covered

Topics Covered

security advisory moderate update privilege escalation SUSE CouchDB

References

#1100973

Cross- CVE-2018-8007

Affected Products:

SUSE OpenStack Cloud Crowbar 8

https://www.suse.com/security/cve/CVE-2018-8007.html

https://bugzilla.suse.com/1100973

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2018:2765-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate update privilege escalation SUSE CouchDB

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.