CVE-2019-18900

: Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform 3.0 libzypp versions prior to 16.21.2-27.68.1. SUSE Linux Enterprise Server 12 libzypp versions prior to 16.21.2-2.45.1. SUSE Linux Enterprise Server 15 17.19.0-3.34.1.

• CWE-276
• CWE-276

• http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00036.html
• https://bugzilla.suse.com/show_bug.cgi?id=1158763Issue Tracking, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/03/msg00005.html
• http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00036.html
• https://bugzilla.suse.com/show_bug.cgi?id=1158763Issue Tracking, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/03/msg00005.html

Published

Jan 24, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18894In Avast Premium Security 19.8.2393, attackers can send a sp…7.8
• CVE-2019-18895Scanguard through 2019-11-12 on Windows has Insecure Permiss…7.8
• CVE-2019-18897A UNIX Symbolic Link (Symlink) Following vulnerability in th…7.8
• CVE-2019-18898UNIX Symbolic Link (Symlink) Following vulnerability in the …7.8
• CVE-2019-18899The apt-cacher-ng package of openSUSE Leap 15.1 runs operati…5.5
• CVE-2019-1890A vulnerability in the fabric infrastructure VLAN connection…6.5
• CVE-2019-18901A UNIX Symbolic Link (Symlink) Following vulnerability in th…5.5
• CVE-2019-18902A Use After Free vulnerability in wicked of SUSE Linux Enter…9.8
• CVE-2019-18903A Use After Free vulnerability in wicked of SUSE Linux Enter…9.8
• CVE-2019-18904A Uncontrolled Resource Consumption vulnerability in rmt of …7.5
• CVE-2019-18905A Insufficient Verification of Data Authenticity vulnerabili…5.9
• CVE-2019-18906A Improper Authentication vulnerability in cryptctl of SUSE …9.8