[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTe3Skuwt88wXTggdH2LMBVANPQ1IRwXnM0OEujubr_M":3,"g5a-risk:CVE-2019-3691":139},{"success":4,"data":5,"meta":137},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":26,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":64,"references":65,"referencesCount":73,"weaknesses":74,"weaknessesCount":73,"isActivelyExploited":83,"cisaInfo":26,"otxData":26,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":135,"notableEvents":136},"CVE-2019-3691","What is CVE-2019-3691?","A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE Factory munge versions prior to 0.5.13-6.1.","A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to e...","2020-01-23T16:15:11.76","2023-01-31T20:52:48.037",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":37,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":35,"ImpactScore":36},"meissner@suse.de","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":34,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",7.7,2.5,5.2,[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":25,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":42,"IntegrityImpact":42,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",7.2,3.9,10,0.00519,[46,46,46,46,46,46,46],"High",[50,55,60],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"opensuse","munge","*","cpe:2.3:a:opensuse:munge:*:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"suse","suse_linux_enterprise_server","15","cpe:2.3:o:suse:suse_linux_enterprise_server:15:*:*:*:*:*:*:*",{"vendor":51,"product":61,"version":62,"criteria":63,"vulnerable":4},"factory","-","cpe:2.3:a:opensuse:factory:-:*:*:*:*:*:*:*",3,[66],{"url":67,"source":68,"tags":69},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1155075","Suse",[70,71,72],"Exploit","Issue Tracking","Vendor Advisory",1,[75],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2019-3691? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-3691, a high severity cyber security vulnerability from 2020. A Symbolic Link (Symlink) Following vulnerability in the pac...","CVE-2019-3691, CVE-2019-3691 vulnerability, CVE-2019-3691 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, opensuse security, suse security, munge vulnerability, suse_linux_enterprise_server vulnerability, factory vulnerability","\u002Fwhat-is\u002Fcve-2019-3691",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-3691","Cybersecurity","CVE-2019-3691, CVE-2019-3691 vulnerability, CVE-2019-3691 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111,124],{"Operator":112,"Negate":26,"Nodes":113},"AND",[114,120],{"Operator":115,"Negate":26,"CPEMatch":116},"OR",[117],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":119,"VersionEndIncluding":26},"3363ADD6-CFF1-4965-A3BA-276D41B2B662","0.5.13-4.3.1",{"Operator":115,"Negate":26,"CPEMatch":121},[122],{"Vulnerable":26,"Criteria":59,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AF73A3D9-6566-4CBF-AA5F-5A4B99719A1D",{"Operator":112,"Negate":26,"Nodes":125},[126,131],{"Operator":115,"Negate":26,"CPEMatch":127},[128],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":129,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":130,"VersionEndIncluding":26},"35959756-D744-4A3F-90A6-7D2205D7A125","0.5.13-6.1",{"Operator":115,"Negate":26,"CPEMatch":132},[133],{"Vulnerable":26,"Criteria":63,"MatchCriteriaID":134,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E29492E1-43D8-43BF-94E3-26A762A66FAA",[],[],{"lastModified":11,"cacheTime":138,"version":40},1792361922418,{"score":140,"band":141,"action":142,"scoredAt":143},47,"Medium","Plan remediation","2026-10-16T06:47:44.520603+00:00"]