CVE-2019-3694

A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin to root. This issue affects: openSUSE Factory munin version 2.0.49-4.2 and prior versions. openSUSE Leap 15.1 munin version 2.0.40-lp151.1.1 and prior versions.

• CWE-59
• CWE-59

• https://bugzilla.suse.com/show_bug.cgi?id=1155078Issue Tracking, Vendor Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1155078Issue Tracking, Vendor Advisory

Published

Jan 24, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3688The /usr/sbin/pinger binary packaged with squid in SUSE Linu…7.1
• CVE-2019-3689The nfs-utils package in SUSE Linux Enterprise Server 12 bef…9.8
• CVE-2019-3690The chkstat tool in the permissions package followed symlink…7.8
• CVE-2019-3691A Symbolic Link (Symlink) Following vulnerability in the pac…7.8
• CVE-2019-3692The packaging of inn on SUSE Linux Enterprise Server 11; ope…7.8
• CVE-2019-3693A symlink following vulnerability in the packaging of mailma…7.8
• CVE-2019-3695A Improper Control of Generation of Code vulnerability in th…7.8
• CVE-2019-3696A Improper Limitation of a Pathname to a Restricted Director…7.3
• CVE-2019-3697UNIX Symbolic Link (Symlink) Following vulnerability in the …7.8
• CVE-2019-3698UNIX Symbolic Link (Symlink) Following vulnerability in the …7
• CVE-2019-3699UNIX Symbolic Link (Symlink) Following vulnerability in the …7.8
• CVE-2019-3700yast2-security didn't use secure defaults to protect passwor…3.3