description: A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This issue affects SUSE Linux Enterprise Desktop 15 SP5: before 3.7.3-150500.3.5.1; SUSE Linux Enterprise High Performance Computing 15 SP5: before 3.7.3-150500.3.5.1; openSUSE Leap 15.5 : before 3.7.3-150500.3.5.1.
problem types: CWE-59: Improper Link Resolution Before File Access ('Link Following')
affected:
{
defaultStatus: unaffected
packageName: postfix
product: SUSE Linux Enterprise Desktop 15 SP5
vendor: SUSE
versions:
lessThan: 3.7.3-150500.3.5.1, status: affected, version: ?, versionType: custom
}
{
defaultStatus: unaffected
packageName: postfix
product: SUSE Linux Enterprise High Performance Computing 15 SP5
vendor: SUSE
versions:
lessThan: 3.7.3-150500.3.5.1, status: affected, version: ?, versionType: custom
}
{
defaultStatus: unaffected
packageName: postfix
product: openSUSE Leap 15.5
vendor: SUSE
versions:
lessThan: 3.7.3-150500.3.5.1, status: affected, version: ?, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL