CVE-2020-8013

A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12 permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to 2013.1.7-0.6.12.1.

• CWE-59
• CWE-59

• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.htmlMailing List, Vendor Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1163922Issue Tracking, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.htmlMailing List, Vendor Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1163922Issue Tracking, Vendor Advisory

Published

Mar 2, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-8006The server in Circontrol Raption through 5.11.2 has a pre-au…8.8
• CVE-2020-8007The pwrstudio web application of EV Charger (in the server i…9.8
• CVE-2020-8009AVB MOTU devices through 2020-01-22 allow /.. Directory Trav…7.5
• CVE-2020-8010CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.…9.8
• CVE-2020-8011CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.…7.5
• CVE-2020-8012CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.…9.8
• CVE-2020-8014A UNIX Symbolic Link (Symlink) Following vulnerability in th…7.8
• CVE-2020-8015A UNIX Symbolic Link (Symlink) Following vulnerability in th…7.8
• CVE-2020-8016A Race Condition Enabling Link Following vulnerability in th…7
• CVE-2020-8017A Race Condition Enabling Link Following vulnerability in th…6.3
• CVE-2020-8018A Incorrect Default Permissions vulnerability in the SLES15-…7.8
• CVE-2020-8019A UNIX Symbolic Link (Symlink) Following vulnerability in th…7.8