CVE-2019-18901

A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Server 12 mariadb versions prior to 10.2.31-3.25.1. SUSE Linux Enterprise Server 15 mariadb versions prior to 10.2.31-3.26.1.

• CWE-59
• CWE-59

• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00007.htmlBroken Link, Mailing List, Vendor Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1160895Issue Tracking, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00007.htmlBroken Link, Mailing List, Vendor Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1160895Issue Tracking, Vendor Advisory

Published

Mar 2, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18895Scanguard through 2019-11-12 on Windows has Insecure Permiss…7.8
• CVE-2019-18897A UNIX Symbolic Link (Symlink) Following vulnerability in th…7.8
• CVE-2019-18898UNIX Symbolic Link (Symlink) Following vulnerability in the …7.8
• CVE-2019-18899The apt-cacher-ng package of openSUSE Leap 15.1 runs operati…5.5
• CVE-2019-1890A vulnerability in the fabric infrastructure VLAN connection…6.5
• CVE-2019-18900: Incorrect Default Permissions vulnerability in libzypp of …3.3
• CVE-2019-18902A Use After Free vulnerability in wicked of SUSE Linux Enter…9.8
• CVE-2019-18903A Use After Free vulnerability in wicked of SUSE Linux Enter…9.8
• CVE-2019-18904A Uncontrolled Resource Consumption vulnerability in rmt of …7.5
• CVE-2019-18905A Insufficient Verification of Data Authenticity vulnerabili…5.9
• CVE-2019-18906A Improper Authentication vulnerability in cryptctl of SUSE …9.8
• CVE-2019-18909The VPN software within HP ThinPro does not safely handle us…8