CVE-2020-8013

lowpriority · track · 10EPSS 0.003 · 25 %ileEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.32% (25th) EPSS

CVSS 1.9 · low

Is it mine?

21 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-28

A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12 permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to 2013.1.7-0.6.12.1.

cvss

Technical severity, 0–10. One row per scoring source.

2.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.01.9lowAV:L/AC:M/Au:N/C:N/I:P/A:Nprimary · NVD / NIST USexploitability 3.4 · impact 2.9

v3.12.5lowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:Nprimary · NVD / NIST USexploitability 1 · impact 1.4

v3.12.2lowAV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:Nsecondary · FSTEC (BDU) RU

v3.12.2lowCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:Nsecondary · ENISA EU

v3.12.2lowCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:Nsecondary · meissner@suse.deexploitability 0.8 · impact 1.4

v3.12.3lowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-59USCWE-59US

affected products (21)

Products and version ranges known to be affected.

SUSE SUSE Linux Enterprise Server 11permissions → 2013.1.7-0.6.12.1enisa_euvdEU
SUSE SUSE Linux Enterprise Server 12permissions → 2015.09.28.1626-17.27.1enisa_euvdEU
SUSE SUSE Linux Enterprise Server 15permissions → 20181116-9.23.1enisa_euvdEU
Novell Inc. OpenSUSE Leap≤ 15fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP2fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP5fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP4fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP3fstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 12 SP4fstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 12 SP2-BCLfstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 15-ESPOSfstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 15-LTSSfstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 12 SP5fstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 12 SP3-BCLfstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 12 SP3-LTSSfstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 12 SP2-LTSSfstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 11 SP4-LTSSfstec_bduRU
opensuse leap= 15.1nvdUScpe:2.3:o:opensuse:leap:*:*:*:*:*:*:*:*
suse linux enterprise server= 11nvdUScpe:2.3:o:suse:linux_enterprise_server:*:*:*:*:*:*:*:*
suse linux enterprise server= 12nvdUScpe:2.3:o:suse:linux_enterprise_server:*:*:*:*:*:*:*:*

showing 20 of 21

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2020-03-02modified 2026-06-17

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan