[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhMxdoh52QzdqyGlCVtYZhtVAOi_PRGILFgHccWYmhC0":3,"g5a-risk:CVE-2020-8022":290},{"success":4,"data":5,"meta":288},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":26,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":82,"references":83,"referencesCount":109,"weaknesses":110,"weaknessesCount":119,"isActivelyExploited":120,"cisaInfo":26,"otxData":26,"relatedBlogPosts":121,"seoMetadata":122,"configurations":147,"relatedVendorCves":286,"notableEvents":287},"CVE-2020-8022","What is CVE-2020-8022?","A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8 allows local attackers to escalate from group tomcat to root. This issue affects: SUSE Enterprise Storage 5 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP2-BCL tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP2-LTSS tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP3-BCL tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP3-LTSS tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP4 tomcat versions prior to 9.0.35-3.39.1. SUSE Linux Enterprise Server 12-SP5 tomcat versions prior to 9.0.35-3.39.1. SUSE Linux Enterprise Server 15-LTSS tomcat versions prior to 9.0.35-3.57.3. SUSE Linux Enterprise Server for SAP 12-SP2 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server for SAP 12-SP3 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server for SAP 15 tomcat versions prior to 9.0.35-3.57.3. SUSE OpenStack Cloud 7 tomcat versions prior to 8.0.53-29.32.1. SUSE OpenStack Cloud 8 tomcat versions prior to 8.0.53-29.32.1. SUSE OpenStack Cloud Crowbar 8 tomcat versions prior to 8.0.53-29.32.1.","A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux En...","2020-06-29T09:15:11.307","2023-11-07T03:26:14.817",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":37,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":35,"ImpactScore":36},"404e59f5-483d-4b8a-8e7a-e67604dd8afb","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":34,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",7.7,2.5,5.2,[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":25,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":42,"IntegrityImpact":42,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",7.2,3.9,10,0.00857,[46,46,46,46,46,46,46],"High",[50,55,60,64,68,71,74,77],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"apache","tomcat","*","cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"suse","enterprise_storage","5.0","cpe:2.3:a:suse:enterprise_storage:5.0:*:*:*:*:*:*:*",{"vendor":56,"product":61,"version":62,"criteria":63,"vulnerable":4},"linux_enterprise_server","12","cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*",{"vendor":56,"product":65,"version":66,"criteria":67,"vulnerable":4},"openstack_cloud","7.0","cpe:2.3:a:suse:openstack_cloud:7.0:*:*:*:*:*:*:*",{"vendor":56,"product":65,"version":69,"criteria":70,"vulnerable":4},"8.0","cpe:2.3:a:suse:openstack_cloud:8.0:*:*:*:*:*:*:*",{"vendor":56,"product":72,"version":69,"criteria":73,"vulnerable":4},"openstack_cloud_crowbar","cpe:2.3:a:suse:openstack_cloud_crowbar:8.0:*:*:*:*:*:*:*",{"vendor":56,"product":61,"version":75,"criteria":76,"vulnerable":4},"15","cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:sap:*:*",{"vendor":78,"product":79,"version":80,"criteria":81,"vulnerable":4},"opensuse","leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",8,[84,90,96,100,103,106],{"url":85,"source":86,"tags":87},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-06\u002Fmsg00066.html","Opensuse",[88,89],"Mailing List","Vendor Advisory",{"url":91,"source":92,"tags":93},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1172405","Suse",[94,95,89],"Exploit","Issue Tracking",{"url":97,"source":98,"tags":99},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr393d4f431683e99c839b4aed68f720b8583bca6c35cd84adccaa02be%40%3Cjava-dev.axis.apache.org%3E","Apache",[],{"url":101,"source":98,"tags":102},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr5be80ba868a11a1f64e4922399f171b8619bca4bc2039f79cf913928%40%3Cjava-dev.axis.apache.org%3E",[],{"url":104,"source":98,"tags":105},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fra87ec20a0f4b226c81c7eed27e5d7433ccdc41e61a8da408a45f0fa1%40%3Cusers.tomcat.apache.org%3E",[],{"url":107,"source":98,"tags":108},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frf50d02409e5732c4ee37f19a193af171251a25a652599ce3c2bc69e7%40%3Cusers.tomcat.apache.org%3E",[],6,[111],{"id":112,"name":113,"description":114,"extendedDescription":115,"status":116,"abstraction":117,"structure":118},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",1,false,[],{"title":123,"metaDescription":124,"keywords":125,"canonicalUrl":126,"structuredData":127},"What is CVE-2020-8022? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-8022, a high severity cyber security vulnerability from 2020. A Incorrect Default Permissions vulnerability in the packagi...","CVE-2020-8022, CVE-2020-8022 vulnerability, CVE-2020-8022 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, apache security, suse security, opensuse security, tomcat vulnerability, enterprise_storage vulnerability, linux_enterprise_server vulnerability, openstack_cloud vulnerability, openstack_cloud_crowbar vulnerability","\u002Fwhat-is\u002Fcve-2020-8022",{"@context":128,"@type":129,"headline":123,"description":124,"datePublished":10,"dateModified":11,"author":130,"publisher":134,"about":138,"mainEntityOfPage":142,"articleSection":145,"keywords":146},"https:\u002F\u002Fschema.org","TechArticle",{"@type":131,"name":132,"url":133},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":131,"name":132,"url":133,"logo":135},{"@type":136,"url":137},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":139,"name":6,"description":140,"additionalType":141},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":143,"@id":144},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-8022","Cybersecurity","CVE-2020-8022, CVE-2020-8022 vulnerability, CVE-2020-8022 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[148,161,170,180,190,200,210,220,229,238,247,259,269,280],{"Operator":149,"Negate":26,"Nodes":150},"AND",[151,157],{"Operator":152,"Negate":26,"CPEMatch":153},"OR",[154],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":156,"VersionEndIncluding":26},"3B0095DD-61C0-4FC9-A466-8335D4AF1AEF","8.0.53-29.32.1",{"Operator":152,"Negate":26,"CPEMatch":158},[159],{"Vulnerable":26,"Criteria":59,"MatchCriteriaID":160,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CB13FD29-BB94-4B33-870F-7EC956E87515",{"Operator":149,"Negate":26,"Nodes":162},[163,166],{"Operator":152,"Negate":26,"CPEMatch":164},[165],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":156,"VersionEndIncluding":26},{"Operator":152,"Negate":26,"CPEMatch":167},[168],{"Vulnerable":26,"Criteria":63,"MatchCriteriaID":169,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F84B2729-7B52-4505-9656-1BD31B980705",{"Operator":149,"Negate":26,"Nodes":171},[172,175],{"Operator":152,"Negate":26,"CPEMatch":173},[174],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":156,"VersionEndIncluding":26},{"Operator":152,"Negate":26,"CPEMatch":176},[177],{"Vulnerable":26,"Criteria":178,"MatchCriteriaID":179,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:ltss:*:*:*","32C12523-2500-44D0-97EE-E740BD3E61B3",{"Operator":149,"Negate":26,"Nodes":181},[182,185],{"Operator":152,"Negate":26,"CPEMatch":183},[184],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":156,"VersionEndIncluding":26},{"Operator":152,"Negate":26,"CPEMatch":186},[187],{"Vulnerable":26,"Criteria":188,"MatchCriteriaID":189,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:*:*:*:*","631BB7F0-5F27-4244-8E72-428DA824C75B",{"Operator":149,"Negate":26,"Nodes":191},[192,195],{"Operator":152,"Negate":26,"CPEMatch":193},[194],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":156,"VersionEndIncluding":26},{"Operator":152,"Negate":26,"CPEMatch":196},[197],{"Vulnerable":26,"Criteria":198,"MatchCriteriaID":199,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:ltss:*:*:*","C6622CD4-DF4B-4064-BAEB-5E382C4B05C8",{"Operator":149,"Negate":26,"Nodes":201},[202,205],{"Operator":152,"Negate":26,"CPEMatch":203},[204],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":156,"VersionEndIncluding":26},{"Operator":152,"Negate":26,"CPEMatch":206},[207],{"Vulnerable":26,"Criteria":208,"MatchCriteriaID":209,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:sap:*:*","3691A00A-D075-437B-A818-C7C26EE73532",{"Operator":149,"Negate":26,"Nodes":211},[212,215],{"Operator":152,"Negate":26,"CPEMatch":213},[214],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":156,"VersionEndIncluding":26},{"Operator":152,"Negate":26,"CPEMatch":216},[217],{"Vulnerable":26,"Criteria":218,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:*:sap:*:*","16729D9C-DC05-41BD-9B32-682983190CE0",{"Operator":149,"Negate":26,"Nodes":221},[222,225],{"Operator":152,"Negate":26,"CPEMatch":223},[224],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":156,"VersionEndIncluding":26},{"Operator":152,"Negate":26,"CPEMatch":226},[227],{"Vulnerable":26,"Criteria":67,"MatchCriteriaID":228,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6A11C023-22C5-409C-9818-2C91D51AE01B",{"Operator":149,"Negate":26,"Nodes":230},[231,234],{"Operator":152,"Negate":26,"CPEMatch":232},[233],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":156,"VersionEndIncluding":26},{"Operator":152,"Negate":26,"CPEMatch":235},[236],{"Vulnerable":26,"Criteria":70,"MatchCriteriaID":237,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1C3BEB21-4080-4258-B95C-562D717AED0B",{"Operator":149,"Negate":26,"Nodes":239},[240,243],{"Operator":152,"Negate":26,"CPEMatch":241},[242],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":156,"VersionEndIncluding":26},{"Operator":152,"Negate":26,"CPEMatch":244},[245],{"Vulnerable":26,"Criteria":73,"MatchCriteriaID":246,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1675CBE5-44D3-4326-AE8B-EEB9E25D783A",{"Operator":149,"Negate":26,"Nodes":248},[249,254],{"Operator":152,"Negate":26,"CPEMatch":250},[251],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":252,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":253,"VersionEndIncluding":26},"D89AB32C-1920-4936-9904-4E64F174B0E4","9.0.35-3.39.1",{"Operator":152,"Negate":26,"CPEMatch":255},[256],{"Vulnerable":26,"Criteria":257,"MatchCriteriaID":258,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:*:*:*:*","55E8AB88-2347-497B-91DE-AF64E08ED8F3",{"Operator":149,"Negate":26,"Nodes":260},[261,264],{"Operator":152,"Negate":26,"CPEMatch":262},[263],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":252,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":253,"VersionEndIncluding":26},{"Operator":152,"Negate":26,"CPEMatch":265},[266],{"Vulnerable":26,"Criteria":267,"MatchCriteriaID":268,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:*:*:*:*","29AE5751-3EA5-4056-8E79-16D8DCD248EF",{"Operator":149,"Negate":26,"Nodes":270},[271,276],{"Operator":152,"Negate":26,"CPEMatch":272},[273],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":274,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":275,"VersionEndIncluding":26},"4FC1168B-713C-413E-B518-0D1E98052E46","9.0.35-3.57.3",{"Operator":152,"Negate":26,"CPEMatch":277},[278],{"Vulnerable":26,"Criteria":76,"MatchCriteriaID":279,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C665A768-DBDA-4197-9159-A2791E98A84F",{"Operator":26,"Negate":26,"Nodes":281},[282],{"Operator":152,"Negate":26,"CPEMatch":283},[284],{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":285,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B620311B-34A3-48A6-82DF-6F078D7A4493",[],[],{"lastModified":11,"cacheTime":289,"version":40},1792264667941,{"score":291,"band":292,"action":293,"scoredAt":294},45,"Medium","Plan remediation","2026-10-16T06:48:55.579793+00:00"]