CWE Code: 59
Vulnerability Type: privilege_escalation
CVSS Score: 3.3
CWE Name:  Improper Link Resolution Before File Access ('Link Following')
Summary: in supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): NONE/PARTIAL/PARTIAL
Published Date: 2019-03-05
Last Modified Date: 2019-05-08