Security Advisory

CVE-2017-9286

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-03-01 19:00:00

Last updated 2024-09-16 16:28:16

Assigner microfocus

CVSS score 7.8

State PUBLISHED

Description

The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts running as wwwrun user to escalate privileges to root during nextcloud package upgrade.

← Browse all CVEs View on cve.org ↗