CVE-2016-1602

2017-03-2306:36:00

microfocus

www.cve.org

0.0004 Low

EPSS

Percentile

5.1%

JSON

A code injection in the supportconfig data collection tool in supportutils in SUSE Linux Enterprise Server 12 and 12-SP1 and SUSE Linux Enterprise Desktop 12 and 12-SP1 could be used by local attackers to execute code as the user running supportconfig (usually root).

CNA Affected

[
  {
    "product": "supportconfig",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "supportconfig"
      }
    ]
  }
]

References

lists.suse.com/pipermail/sle-security-updates/2016-June/002096.html

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2016-1602